last executing test programs: 22m17.87786927s ago: executing program 32 (id=55): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") 22m11.929276934s ago: executing program 33 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f00000006c0)="$eJzs3T9rZFUUAPDzkjdvZlWYKaxE8IEWVutmW5sJsgExlUsKtdDg7oJkgrALAf/g7Fa2NhYWfgJB8IPY+A0EW8HOVRauvH/MSzKJO8GJaH6/Jod7z3n3vJdL8lLkzgcvHh7cKePeo89/jtEoi41pTONxFpPYiM7DOGb6VQAA/2WPU4rfUuPMpOdOD2URMVpvawDAmpz9+7/sxfki/OHSWgMA1uT2O+++tb27e+vtshzFzuGXR3vVX/bV12Z++158FLO4GzdiHE8i6heFQdRvC1W4k1Ka52VlEq8czo/2qsrD939sr7/9a0RdvxXjmNRDKaW8C9LOm7u3tspGr35e9fFMu/60qr8Z43i+Xb99W+nqby6pj70iXn251//1GMdPH8bHMYs79dqL+i+2yvKN9PXvn71XdVXVZ/OjvWGdt5A2L/UbAwAAAAAAAAAAAAAAAAAAAADA/9r19uycYZSTP5szANvzdzafVPODKDuT4+fzNPVZd6H++UAppXmKb7vzdW6UZZnaxEV9Hi/k/YMFAQAAAAAAAAAAAAAAAAAA4Op68MmnB/uz2d37Fw6uxWKkOw0gj4g/bkdc9MrT3shLUQf5Wa0O2zX3Z7ONNjyek/dHYrPLySLObaO6iYs/loNVkq+d6rkNvvt+1dVHf58zWL7WPxl0u+tgP1v+DIfRjYzaTfJNEb2NVMRTrlWcNZVile1XLJ0ar3zvxbN1MD8nJ7LzGnv9l+bJtSPZybso6qfajLw2aHLbqUGb0ys/sTeeaj/HqCk//bMic1oHAAAAAAAAAAAAAAAAAACs1eK/f5dMPjq3dCMN19YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyqxef/rxDM2+KTU/GwGe8lF3H/wb95fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwNfwUAAP//ThJUUw==") 20m38.05597555s ago: executing program 34 (id=190): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x5}, 0x0, [0x0, 0x0, 0x4000, 0x9, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x9, 0x1000, 0x400000000, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0x2000, 0x0, 0x29, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x2, 0x0, 0x1000000000000, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xc0c0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0xb, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = syz_open_pts(r4, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x2) bind$netlink(r2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="04000200"], 0x28}}, 0x4040040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 20m23.91812972s ago: executing program 35 (id=217): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd30, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xc}, {0x5, 0x5}, {0x10}}}, 0x24}}, 0x20040000) 19m52.141544559s ago: executing program 36 (id=238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000380)='./bus\x00', 0x400, &(0x7f0000002480)=ANY=[], 0x1, 0x11fe, &(0x7f0000002480)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(0x0, 0xca942, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) getpgrp(r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000), 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) fsetxattr$trusted_overlay_origin(r6, 0x0, &(0x7f0000000340), 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 19m47.329925855s ago: executing program 37 (id=242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000000)={[{@nogrpid}, {@jqfmt_vfsv0}, {@nouid32}, {@debug}, {@nobarrier}, {@quota}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, 0x0, &(0x7f0000000080)=@udp6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000540)}, 0x20) setresuid(0xee01, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 18m43.211175654s ago: executing program 38 (id=306): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r0 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x80000001) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) getrlimit(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000a80)={[{@bsdgroups}, {@block_validity}, {@norecovery}, {@grpjquota}, {@grpjquota}, {@auto_da_alloc}, {@abort}, {@noload}, {@nodiscard}, {@errors_continue}, {@nombcache}, {@data_err_ignore}, {@resgid}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") 18m37.19330182s ago: executing program 39 (id=316): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40800, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") 16m16.801569689s ago: executing program 40 (id=563): bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 15m59.468422482s ago: executing program 1 (id=617): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 15m57.58705469s ago: executing program 1 (id=620): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0xffffffff, 0x16}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x2}, 0x18) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 15m56.197663684s ago: executing program 1 (id=625): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd, 0x40ad}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 15m54.734025742s ago: executing program 1 (id=627): write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581ef02"], 0x0) 15m52.142986177s ago: executing program 1 (id=631): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/ignore_tunneled\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) r6 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 15m50.604539102s ago: executing program 1 (id=634): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x25, 0x80000, 0xa) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2}) 15m46.878291403s ago: executing program 3 (id=640): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb200090581ef02"], 0x0) 15m44.180877235s ago: executing program 3 (id=646): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) socket(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r1, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) 15m43.445865303s ago: executing program 3 (id=649): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000e00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x180040}, 0xc, &(0x7f0000000f40)={0x0}, 0x1, 0x0, 0x0, 0x4018}, 0x40801) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 15m41.315622785s ago: executing program 3 (id=652): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 15m40.394775066s ago: executing program 3 (id=655): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 15m39.032038319s ago: executing program 3 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="040e0c790320"], 0xf) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) sendmsg$nl_route(r0, 0x0, 0x4000000) socket(0x1d, 0x2, 0x6) mq_open(&(0x7f0000000080)='\x00', 0x2, 0x6, &(0x7f00000000c0)={0x2d2, 0x214c00, 0x6, 0xd}) 15m35.158066192s ago: executing program 41 (id=634): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x25, 0x80000, 0xa) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x2}) 15m23.570759631s ago: executing program 42 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="040e0c790320"], 0xf) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)) sendmsg$nl_route(r0, 0x0, 0x4000000) socket(0x1d, 0x2, 0x6) mq_open(&(0x7f0000000080)='\x00', 0x2, 0x6, &(0x7f00000000c0)={0x2d2, 0x214c00, 0x6, 0xd}) 14m53.390284724s ago: executing program 2 (id=731): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r2, {0xa}, {0x6}, {0x0, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x40) 14m52.423107238s ago: executing program 2 (id=734): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000006240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xfffffffc, 0x10400}}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 14m51.408974997s ago: executing program 2 (id=737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x414, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3d8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x394, 0x2, [@m_skbedit={0x14c, 0x1f, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x6, 0x20000000, 0xaf000000, 0x1}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3ff}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}]}, {0xef, 0x6, "4c0b2d056d27d61bf9caa7638256403e0a873ca84f9e23b21c8b50af1caf8445094c77efc7a906cc51927cae63f5582b9cd772754ad95975f8cd15a7eaf94d6407b559f7e03319122770e276d047f4e861875f58f1f09c50ed6055b988b88edb58dbe1b4964af4b889e66d3e316861be06762ece4361114a00bf7934b73b2fcfcc13476192158ee9e4eb6ac960884827b73b0070d251dfb26c40ee090cf9d8b117e148b8bf73557fc7200d34a97ba8fdfb6822477f55185368e5735891cf0e8306674740bbb34c5274c454ba6a9f17fe9ac26abf476434507f12237fdafb132634a52843c93aa663f4dac1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x130, 0x16, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x2, 0x9, 0xbde, 0x4}, @broadcast, @broadcast, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x5, 0x0, 0x400, 0xffff7fff}, @multicast1, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x3, 0x1, 0x7}, @broadcast, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x43, 0x0, 0x9, 0x200}, @multicast1, @loopback, 0xffffffff, 0x1}}]}, {0x68, 0x6, "efb1ceb9e1fd5c3140979a820830591412b3a1e51ff01430b993e9513caeae48b445fc37a3632c283671b57dd18d62cc84acc268c7342a5de3348ec761f3af57144f222391ee893e8205a4803bb4aa896c4072f30729be7dd8940468da8e00213347348f"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ct={0x114, 0x1a, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "a15a1126ed2dbc77499eb26844a4b31b"}, @TCA_CT_LABELS={0x14, 0x7, "bf91b338555d4b4d82637cd8f81d8678"}]}, {0xc2, 0x6, "c527675bf7f4646ae31c844a33598eff03ceaabbf6272a809016b3f45d79c400b539c7a4d14eaae83644f301ed04c18bf42d5c76a75e8a581d9a3557c255c6295de63eb3da7d415bef4d1f78361360ce6fe6411cab60fa0a5057105013247436fea28171a79df64b155fc529fcfebcabf8e2f34843a55ef8798b5d34a7f442bde0879242568c20977076b5be5c90ddd6de40fd02d6c00f1f52b2454bd700ba583c7a3e90fc14df63eeb534c65c8bfdca7233e81f51f78cc2c2ccc2f16679"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x414}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) 14m50.054646384s ago: executing program 2 (id=740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd, 0x40ad}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 14m48.621865435s ago: executing program 2 (id=743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c60ebab1c176bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc28d0072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd5adb8e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d01006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f60109af93a09fab1daae4b518d7a5d95a017864487367d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff6f16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c64ac4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5ce4ba01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b059bc295aa0e38ff07edc3492b96e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe449678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a6a2bb0cfb284fcfde9015769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443a6a64c7803760880af23fb3f430a5d11fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630ed5a0c2261bc2d5de6ee174534b8dfc0432ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79aa2832c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574bda31f81d61ccfd58080d2330b9c7b535aed87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf31523d753cf27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e72daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca67905e877893646d185a75582f866785af6b0149e336c31fb177e3e85f4c60cbbde4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3045b9c790984c6fb65fd7887bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981b90d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212dedd245b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000000000000000000000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699f61acdc8e36010d76093ddd227df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eebf33a260a9b26477267"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 14m47.545665832s ago: executing program 2 (id=746): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000071000100"], 0x24}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x1) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f00000001c0)=""/116, 0x74}], 0x2}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0xd000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 14m31.719823724s ago: executing program 43 (id=746): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000071000100"], 0x24}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000240)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x44010}, 0x1) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f00000001c0)=""/116, 0x74}], 0x2}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0xd000) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) 14m23.454909633s ago: executing program 6 (id=801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xb}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240080d0}, 0x0) 14m21.851422932s ago: executing program 6 (id=804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, 0x0) 14m19.610949963s ago: executing program 6 (id=807): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = fanotify_init(0x8, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0xc0189436, &(0x7f0000000140)) 14m18.031329112s ago: executing program 6 (id=811): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000010}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4048040}}], 0x2, 0x4884) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x5ea, 0x0}}], 0x3e8, 0x0) 14m16.938594908s ago: executing program 6 (id=814): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffff8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="8856697a93a4"}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00"], 0xb8}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000025, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0xe98, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0xe60, 0x2, [@TCA_BASIC_ACT={0xd3c, 0x3, [@m_police={0xcd8, 0xc, 0x0, 0x0, {{0xb}, {0xc30, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0x1, 0x5, 0x400, 0x3ff, 0x1, 0x7, 0x6, 0x9, 0xfffffffe, 0x6, 0x200, 0x4, 0x7ff, 0x120424fa, 0x5, 0xd71858c, 0x5, 0x0, 0x2, 0x4c, 0x7, 0xc, 0x7, 0x10001, 0x9, 0x42, 0x5, 0x8001, 0x9, 0x8, 0xffffffff, 0x4, 0x2, 0x0, 0x2, 0x4, 0x2, 0x400, 0x3, 0x200, 0x4, 0x3c, 0x2, 0x5, 0x80000000, 0x0, 0x40, 0x3ee, 0x1, 0x0, 0x6, 0x7, 0x8, 0x4, 0x3, 0xff, 0x5, 0x5, 0x1, 0x3, 0x20000, 0x5f6e, 0x2, 0xfffffffe, 0x401, 0x8, 0x5, 0x2, 0x101, 0x3, 0x9, 0x6, 0x7, 0x5, 0x3, 0x0, 0x5, 0x1fd, 0x4, 0x1400000, 0x7, 0x8, 0x3, 0x2, 0xfffffff1, 0x1, 0x9, 0x0, 0x7, 0x5, 0xfffffff1, 0xfffffffc, 0x2, 0x493fff03, 0xa3f, 0x3, 0x8, 0x273, 0x7, 0x8, 0x0, 0x2, 0x6, 0xe2, 0x1, 0x250, 0x5, 0x4, 0x6, 0x0, 0x9, 0x9, 0x80000000, 0x101, 0x4, 0x7fffffff, 0x4, 0x432845b8, 0x8, 0x40000000, 0xa4, 0x1000, 0x800, 0x101, 0x9, 0x1, 0x2, 0x4, 0x7, 0x0, 0x0, 0x5, 0x7ff, 0x1, 0x80, 0x1, 0x3, 0x9, 0xfffffffd, 0x2, 0x10d8e5e2, 0x3, 0xde, 0x6, 0x2, 0xd27, 0x4, 0x2, 0x1, 0x6, 0x4, 0xa, 0x2e30, 0x80000000, 0x6, 0xfffffffc, 0xfffffffe, 0x4, 0x8, 0x27c, 0x4, 0x2, 0x5, 0x48000, 0x53, 0x4, 0x5fb, 0x6, 0x7, 0xfffffff7, 0x11, 0x8, 0x6, 0xffffff80, 0x10000, 0x3, 0x3, 0xa1ad, 0x6, 0xefd, 0x0, 0x7ff, 0x5, 0x9, 0x401, 0x46, 0xfffffffa, 0x10001, 0x80000000, 0x9, 0xc4, 0x443, 0x1ff, 0x10, 0xd708, 0x7fffffff, 0x8, 0x5, 0x966, 0xfffffe01, 0x2, 0x5, 0x9, 0x8, 0xfffffffc, 0x6, 0x9e2, 0x3, 0xd, 0x1, 0x10, 0x9, 0x4000067f, 0xa, 0x2, 0x3, 0x4, 0x1, 0x2, 0xa, 0x8000, 0x8, 0x7, 0x4, 0x0, 0x3, 0xe, 0x81, 0xfffffffc, 0xe, 0x6, 0x7fffffff, 0xffffffff, 0x3, 0x8, 0x9, 0xc, 0xfffffffd, 0x8, 0x1e, 0x33, 0x4, 0xd4, 0x4, 0x4, 0x6, 0x27f9e4bf, 0xe3, 0x9, 0x9, 0x7fffffff, 0xff, 0x5, 0xbf, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5ad6, 0x7, 0x9, 0x9, 0x6, 0x7, 0x1ff, 0x6, 0x8, 0x2, 0x2, 0x7, 0x3, 0x3ff, 0x2, 0x8c5, 0xf32, 0x0, 0x6, 0x8001, 0x0, 0x8, 0xffff8001, 0x3, 0x9, 0xfffffffe, 0xd, 0x6, 0x7, 0x2, 0x9, 0x4, 0xffff, 0x6, 0x2024, 0x5, 0x9, 0x200, 0x40000001, 0xffffffff, 0x0, 0x1, 0xd9, 0x7fff, 0xa334, 0x10000, 0x8, 0x1, 0xfffffffe, 0x9, 0x3, 0x7, 0x0, 0x5, 0xff, 0x4, 0x80000001, 0xfffffffd, 0x9, 0x9, 0xfffffc01, 0x7, 0x8, 0x5, 0x800, 0x85c, 0x7, 0x6, 0x2, 0x0, 0x495f267e, 0x10000, 0x4, 0x7, 0x81, 0x2a, 0x5, 0x3, 0x3, 0x8, 0x6, 0xd, 0xc, 0x4, 0x0, 0x7f, 0x4, 0x4, 0x5, 0x8000, 0xad, 0x4603, 0x7fffffff, 0x1, 0x784, 0xa9, 0x1ff, 0x4, 0xab2, 0xffffffff, 0x5, 0x1, 0x3, 0x9, 0x8, 0x4512, 0x0, 0x3, 0x9, 0xd, 0x3, 0xffffffff, 0xa5, 0xff, 0x4, 0x7fff, 0xfffffff7, 0x3, 0x3, 0x7, 0x80000001, 0xfff, 0x10001, 0xa2, 0x7, 0x0, 0x42, 0x80, 0x1000000, 0x2, 0x8, 0x0, 0x7, 0xffffffff, 0xffffff2c, 0xffffff0f, 0x5, 0x8, 0x6, 0x9b, 0x200, 0x4, 0x7f, 0x7, 0x1000, 0x1800, 0x1, 0x3, 0x7, 0x100, 0x80000000, 0x6, 0x4, 0x4, 0x3, 0x81, 0x2, 0x7, 0x6, 0x6, 0x3ff, 0x8, 0xe18, 0x6, 0x3, 0x1, 0xb, 0x1, 0x9, 0x8, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x4, 0x4, 0x7, 0x0, 0x2, 0x6, 0x4, 0x5, 0x36c, 0x400, 0xfffffffd, 0xadcd, 0x5, 0xfff, 0x3, 0x5, 0x5, 0x1ff, 0x101, 0x2, 0x5, 0x8b, 0xaa65, 0x5, 0x0, 0xeb, 0xc, 0x5, 0x7, 0x2, 0x3, 0x1, 0x1, 0x58f69f97, 0x7, 0x5db7, 0x10000, 0xfffff778, 0x1, 0xffff3750, 0x4, 0x8, 0xffffffff, 0x400, 0x5, 0xf, 0x33e1, 0x401, 0x1, 0xfffffffd, 0xfa, 0xffff, 0x4efa, 0x5681, 0x100, 0xa4, 0x6, 0x6, 0x5, 0x7, 0x9dc, 0x6, 0x6f, 0xb9, 0x9, 0xfffffff8, 0x296fb8e5, 0x8, 0x2, 0x8001, 0x7f1, 0x9, 0x5000, 0x7, 0x10, 0xffffffff, 0x0, 0x5, 0x5, 0xd]}, @TCA_POLICE_RATE={0x404, 0x2, [0xcb, 0x8, 0x0, 0x7, 0x5, 0x5, 0x1, 0x9, 0x5, 0xf, 0x3fe00000, 0x0, 0x2, 0x8, 0x5, 0xfff, 0x7, 0xb2, 0x8, 0x7fff, 0x7, 0x8, 0x0, 0x52b, 0x5c9d, 0x8, 0x1, 0x10000, 0x9, 0x6, 0x0, 0x7, 0x67c4, 0xff, 0x8d11, 0x1, 0xa, 0xd, 0x8, 0x2, 0x6, 0x6, 0x9, 0xf2a9, 0x100, 0x0, 0x51, 0x4, 0x3, 0x3, 0x3, 0x6, 0xf01, 0x8, 0x7fffffff, 0x10000, 0x3ff, 0x3, 0x9, 0x7, 0x7, 0x5, 0xd, 0x8, 0x6, 0x0, 0x7, 0x0, 0x5, 0x8, 0x97, 0x6, 0xfffffffd, 0x401, 0x4, 0x9, 0xfffffff9, 0x5d2, 0xc, 0x6, 0x2, 0x7, 0x5, 0x2, 0x1, 0x0, 0x2, 0x10001, 0x9, 0x6651, 0xfeb, 0x6677f80e, 0x1, 0x3, 0x5990, 0x7, 0x374b, 0x2, 0x5, 0x1, 0x81, 0x8000, 0x1, 0x6, 0x8, 0x6, 0x4ead, 0x8, 0xd742, 0x1, 0x3, 0x40, 0x9, 0x1, 0x5fc, 0x3, 0xf, 0xe, 0xffffffdb, 0x6, 0x8, 0x2c, 0xba0, 0x9, 0x4, 0xd, 0x3ff, 0x1f29, 0x9, 0x1, 0x8, 0x6, 0x80000000, 0x3, 0xffff, 0x8, 0xfffffffd, 0x200, 0xf, 0xb90, 0x0, 0xfffffff9, 0x1, 0x3, 0x80000000, 0x0, 0x2, 0x10001, 0x6, 0x5, 0x7, 0x5, 0x80, 0xffffc336, 0xffffffff, 0x8, 0xa87, 0x6, 0x10001, 0x81, 0x84, 0x3, 0xffffff18, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x8, 0xfffffff9, 0xf7db, 0xfffffffc, 0x3, 0xfffffffb, 0xab1, 0x4c, 0x20, 0x200, 0x8000, 0x5, 0x6, 0x7, 0xfffffffd, 0x200, 0x0, 0xffffffff, 0x6b, 0xab, 0x9, 0x9a, 0x4, 0x5, 0x3, 0x80000001, 0xf5, 0xb, 0x5, 0x3, 0x6, 0x7fffffff, 0x800, 0x1, 0x8, 0xfff, 0x80000001, 0x2cf2, 0x3, 0x8, 0xfd82, 0x365, 0x101, 0x7, 0xffffffe2, 0x3d0f, 0x8, 0x51c, 0x101, 0x5, 0x1ff, 0x0, 0x4db, 0x3ff, 0x66dc, 0x7ff, 0x7, 0xa13d, 0x21343989, 0x7, 0x124, 0xffffffff, 0x5, 0x54, 0x7f, 0x8000, 0x1, 0x1, 0xfffff000, 0x80000000, 0x1f, 0x2, 0x8001, 0x5, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x7fffffff, 0x6, 0x7, 0x7, 0xf6c, 0x6, 0x200, 0x8001, 0x8001]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x60, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x16, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x120, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfff, 0x1, 0x3}, {0x8, 0x5, 0x5, 0x4, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0x19, 0x7, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd76d, 0x1, 0xcc}, {0x0, 0x10, 0x25, 0x7, 0x5, 0x0, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0xe98}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 14m14.721430139s ago: executing program 6 (id=818): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x4800}, 0xf461fb7ccd43b8c2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5, 0x40081, 0x0, 0x4, 0x800008}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000002", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x5dc2, 0x7fffffff}}) set_mempolicy(0x0, 0xfffffffffffffffe, 0x400) 13m58.981709437s ago: executing program 44 (id=818): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x4800}, 0xf461fb7ccd43b8c2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000280)={0x3, r5, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000080)={0x3, r5, 0x40081, 0x0, 0x4, 0x800008}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000000002", @ANYRES32], 0x3c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syzkaller1\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x5dc2, 0x7fffffff}}) set_mempolicy(0x0, 0xfffffffffffffffe, 0x400) 3m8.597650992s ago: executing program 4 (id=3322): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffff8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="8856697a93a4"}, 0x10) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00"], 0xb8}}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000025, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f80)=@newtfilter={0x2c0, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x288, 0x2, [@TCA_BASIC_ACT={0x11c, 0x3, [@m_police={0xb8, 0xc, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0xe89f}]]}, {0x7e, 0x6, "d6d1fc4c553423c26cd4a66b9bf60fbacc9289c78836c2266997924985a3ea8a74dd2aadafd5a275c17be19abdf55d167c0b15a718ac05f9c2b2a6d1be6480ee159c45a31fdde6d79b54315fb342ec4b57308cec6bc6a5d396a3f2507b4e7fa10fc7d9b6735ba69fc4ee7dd9f162bc186d6dca413d114dc4ccc6"}, {0xc, 0x7, {0xd72d03d6105f067a, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x60, 0x1a, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0xf, 0x7, 0x8, 0x80000001}}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}]}, {0x16, 0x6, "ddb29acb14097fe79758c90e8f1a12986bd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_EMATCHES={0x168, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9}, {0x75, 0x5, 0x2, 0x2, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xe}, {0xffffffffffffffff, 0x4, 0x5}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xee7}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x5}, {0xe, 0x6, 0x2644, 0x4, 0x6, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x800, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x8}, {0x3, 0x4, 0xd, 0x1}}}, @TCF_EM_META={0x60, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x4c, 0x2}, {0xe, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x8}, {0x1ff, 0x80, 0x1}}}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x53, 0x3}, {0x2, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="cbc69de15ebfdff1cd45", @TCF_META_TYPE_VAR="9cb2232a929395"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x4, 0x2}, {0x19, 0x7, 0x2}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x800}, {0x6, 0x1, 0x2, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xd76d, 0x1, 0xcc}, {0x0, 0x10, 0x25, 0x7, 0x5, 0x0, 0x1}}}]}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m6.85549951s ago: executing program 4 (id=3328): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x1, 0xcc, &(0x7f0000000700)=[{&(0x7f0000000800)=""/215, 0xd7}]}, &(0x7f0000000080)="0000501ef663", 0x0, 0x800004, 0x10030, 0x0, 0x0}) 3m6.186768744s ago: executing program 4 (id=3333): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@norecovery}, {@orlov}, {@abort}, {@nombcache}, {@nombcache}]}, 0x64, 0x50f, &(0x7f0000000f80)="$eJzs3c9rXFsdAPDvnczUJk1f8tSFPvD59D1Ji3YmaWwbXNQKoquCWvc1JpMQMsmEzKRtQtEU/wBBRAVXunEj+AcIUnDjUoSCrhUVRbTVhQvtfczMTZqmM8m0nWbSzOcDN/ec++t7zoR7Zs69h3sDGFjvRMS1iHicpun5iBjLlueyKbZbU2O7Rw/vzjWmJNL0xj+TSLJlO8dKsvmZbLfTEfG1L0d8M3k2bm1za3m2UimvZ/lSfWWtVNvcurC0MrtYXiyvTk9PXZ65MnNpZrIn9TwbEVe/+NcffPdnX7r6q8/c/tPNv5/7VqNYo9n6vfV4TvmDVraqXmh+Fnt3WH/BYMdRvlnDzHC7LYaeWXLvFZcJAID2Gr/xPxgRn4yI8zEWQwf/nAUAAABeQ+nnR+N/SUTa3qkOywEAAIDXSK45BjbJFbOxAKORyxWLrTG8H46RXKVaq396obqxOt8aKzsehdzCUqU8mY0VHo9C0shPNdNP8hf35acj4s2I+P7YcDNfnKtW5vt98QMAAAAGxJl9/f//jLX6/wAAAMAJM97vAgAAAACvnP4/AAAAnHz6/wAAAHCifeX69caU7rz/ev7W5sZy9daF+XJtubiyMVecq66vFRer1cXmM/tWDjtepVpd+2ysbtwp1cu1eqm2uXVzpbqxWr+59NQrsAEAAIAj9ObH7/8hiYjtzw03p4ZT3e3a5WbAcZXfTSXZvM1p/cc3WvO/HFGhgCMx1O8CAH2T73cBgL4p7MuP9KkcQP8kh6zvOHjnt9n8E70tDwAA0HsTH+18/z934J7bB68Gjj0nMQyu/ff/tQcwOJr3/7sdyatxgBOlYAQgDLyXvv9/qDR9rgIBAAA9N9qcklwxu7w3GrlcsRhxtvlagEKysFQpT0bEGxHx+7HCBxr5qeaeyaF9BgAAAAAAAAAAAAAAAAAAAAAAAACgJU2TSAEAAIATLSL3t+TXrWf5T4y9N7r/+sCp5L9jkb0i9PaPb/zwzmy9vj7VWP6v3eX1H2XLL/bjCgYAAAAMhOd6gf9OP32nHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfTo4d25neko4/7jCxEx3i5+Pk4356ejEBEj/04iv2e/JCKGehB/uPHnI+3iJ41i7YZsF3+4B/G37x0YP8azT6Fd/DM9iA+D7H6j/bnW7vzLxTvNefvzLx/xVP5FdW7/Yrf9G+pw/p/tMsZbD35R6hj/XsRb+fbtz078pEP8d7uM/42vb211Wpf+JGKi7fdP8lSsUn1lrVTb3LqwtDK7WF4sr05PT12euTJzaWaytLBUKWd/28b43sd++fig+o90iD9+SP3f67L+/39w5+GHWslCu/jn3m0T/zc/zbZ4Nn4u++77VJZurJ/YSW+30nu9/fPfvX1Q/ec71P+w//+5Lut//qvf+XOXmwIAR6C2ubU8W6mU109sotFLPwbFkDiGiW/39IBpmqaNc+oljpPEcfhYmol+t0wAAECvPfnR3++SAAAAAAAAAAAAAAAAAAAAwOA6iseJ7Y+5vZtKevEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnng/AAD//9eZ2WE=") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x142) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1a5c42, 0xd) sendfile(r2, r3, 0x0, 0x80000000) 3m5.005606409s ago: executing program 4 (id=3342): socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000300)={0x800080, 0x810000, 0x1, 0x5, 0xfd, 0xe}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0x0, 0x0, 0x1, 0x3}}, @TCA_CT_MARK={0x8, 0x10, 0x2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r9, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r11 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) wait4(r11, 0x0, 0x8, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000041}, 0x50) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000004c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x3}, 0x0, 0x0, 0x400, 0x7, 0x8d, 0x4, 0x3, 0xf7, 0x6, 0x3, r7, r11}) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) 3m3.305507587s ago: executing program 4 (id=3350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000900)=ANY=[@ANYRESHEX]) 3m2.790370539s ago: executing program 4 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1afcff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="f42a4b33eb66dc9be20be1ee8f6da2c3de859c7fa1637fba993a3e626d2f5e4a262e3a5b01e8e83a2ba6196f6c890aa302c87fa6452ab93b192a853c479e8b2f1b407f615e4978ec6c944dca8dfc3884d6f5855fbf1fe0c1c436536687e9b487f1bc262e73cec173b2ab2731bfdadce7254c9f7e3ecbe8d0dc", 0x79, 0x24004040, &(0x7f0000000280)={0xa, 0x4e22, 0xe87, @dev={0xfe, 0x80, '\x00', 0x33}, 0xe}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m47.18201625s ago: executing program 45 (id=3352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1afcff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hvSuj6TKadKx14PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH0So3PSmy9qkv5aZbPl84Lbn5N7bc78593t7Tm5CAhhYx7IfhYiXI+KbJOJQy7pi5CuPrW63/PD6VLYksbLy6Z9JJPljze2T/PeBvPJSRPz6VcTJwsZ2a4tLs+VKJZ3P62P1uStjtcWlU5fmyjPpTHp5YnLyzFuTE+++83bXYn39/N/ff3L3wzNfH1/+7uf7h28ncTYO5uta43gCN1orx8r/5qXhOLtuw/EuNNZPkl4fALsylOf5cGTXgEMxlGc98Pz7MiJWgAGVyH8YUM1xQHNu36V58DPjwQerE6BG7COt8RdXXxuJvY250f7l5LGZUTbfHe1C+1kbv/xx53a2xOavQ+zbog6wIzduRsTpYnHj9T/Jr3+7d7rx4vHm1rcxaP9/oJfuZuOfN9qN/wpr459oM/450CZ3d2Pr/C/c70IzHWXjv/fajn/XLl2jQ3nthcaYbzi5eKmSno6IFyPiRAzvyeqb3c85s3xvpdO61vFftmTtN8eC+XHcL+55fJ/pcr0cESNPEnfTg5sRrxTbxZ+s9X/Spv+z5+P8Nts4mt55tdO6reN/ulZ+initbf8/uqOVbH5/cqxxPow1z4qN/rp19LdO7fc6/qz/928e/2jSer+2tvM2ftz7T9pp3W7P/5Hks0a5mQTXyvX6/HjESPLxxscnHu3brDe3z+I/cXzz61+78z+bfH2+zfhvHbnVcdN+6P/pHfX/zgv3Pvrih07tb6//32yUTuSP5Ne/9vJzZbsH+KTPHwAAAAAAAPSTQkQcjKRQWisXCqXS6vs7jsT+QqVaq5+8WF24PB2Nz8qOxnCheaf7UMv7Icbz98M26xPr6pMRcTgivh3a16iXpqqV6V4HDwAAAAAAAAAAAAAAAAAAAH3iQIfP/2d+H+r10QFPXeOLDfb0+iiAXtjyK/+78U1PQF/aMv+B55b8h8El/2FwyX8YXPIfBpf8h8El/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqvPnzmXLyvLD61NZffrq4sJs9eqp6bQ2W5pbmCpNVeevlGaq1ZlKWpqqzm319yrV6pXxiVi4NlZPa/Wx2uLShbnqwuX6hUtz5Zn0Qjr8v0QFAAAAAAAAAAAAAAAAAAAAz5ba4tJsuVJJ5xU6Ft6PvjiMpxngql3tXuyXKBQ6FG7m3buzvXp4UQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdf4LAAD//++4Mnc=") sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="f42a4b33eb66dc9be20be1ee8f6da2c3de859c7fa1637fba993a3e626d2f5e4a262e3a5b01e8e83a2ba6196f6c890aa302c87fa6452ab93b192a853c479e8b2f1b407f615e4978ec6c944dca8dfc3884d6f5855fbf1fe0c1c436536687e9b487f1bc262e73cec173b2ab2731bfdadce7254c9f7e3ecbe8d0dc", 0x79, 0x24004040, &(0x7f0000000280)={0xa, 0x4e22, 0xe87, @dev={0xfe, 0x80, '\x00', 0x33}, 0xe}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 56.745776656s ago: executing program 0 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 56.064988738s ago: executing program 0 (id=3744): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000580)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 54.815503035s ago: executing program 0 (id=3750): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0xfffffffd}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x9) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') fcntl$setpipe(r8, 0x407, 0x6) socket$rds(0x15, 0x5, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000400)={0x0, 0xa, 0x8001}) 52.801487152s ago: executing program 0 (id=3757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60"], 0x0) 51.997349437s ago: executing program 0 (id=3762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 51.167041465s ago: executing program 0 (id=3767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) sendto$packet(r0, &(0x7f0000000740)=' ', 0x1, 0x20008801, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x11, 0xa, 0x300) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r3, 0x0, 0xffffbffffffffffb, 0x403}) 48.426043247s ago: executing program 7 (id=3774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) 43.250155832s ago: executing program 7 (id=3790): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x10, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @control}], 0x1c) 42.550137177s ago: executing program 7 (id=3792): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 41.861362693s ago: executing program 7 (id=3796): syz_emit_ethernet(0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60"], 0x0) 41.196139359s ago: executing program 7 (id=3799): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 40.429669148s ago: executing program 7 (id=3803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r4, 0x0, 0xffffbffffffffffb, 0x403}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)}, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) 35.950667003s ago: executing program 46 (id=3767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00'}) sendto$packet(r0, &(0x7f0000000740)=' ', 0x1, 0x20008801, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x11, 0xa, 0x300) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r3, 0x0, 0xffffbffffffffffb, 0x403}) 25.537472146s ago: executing program 5 (id=3834): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x198) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000000), 0x4) r6 = dup3(r3, r4, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) prctl$PR_SET_NAME(0xf, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES64=r1], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r7 = openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r8}, 0x18) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r9}, 0x18) 24.546388764s ago: executing program 5 (id=3835): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) 23.743264435s ago: executing program 47 (id=3803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000b00)={0x48, 0x1, r4, 0x0, 0xffffbffffffffffb, 0x403}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)}, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$SIOCGETSGCNT_IN6(0xffffffffffffffff, 0x89e1, 0x0) 23.679173699s ago: executing program 5 (id=3837): exit(0x7) fchdir(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 22.151541076s ago: executing program 5 (id=3841): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7, 0x1, 0xc, 0xb, 0x59c, 0xffffffffffffffff}) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@grpquota}, {@nouid32}, {@debug}, {@abort}, {@noblock_validity}, {@acl}, {@bsdgroups}]}, 0x1, 0x631, &(0x7f0000000500)="$eJzs3c9rHG0dAPDvzCYxed9oWpVii2LAQwvS/KjFqqe2F3soWLAHEQ8NTVJDN21oUrC1YAoeFBREvIr04j/gXYpXbyKoN89CFYl4UOnKzM6k281ussmb3Wkznw/s9plnZvd5vvvs03me3Tw7AdTWbHaXRpyNiDtJxEzHvulo75wtjtv557O72S2JVuub/0giKfLK418X/36Y3SURkxHxh+sRn2zsLXfzydP7S81W2w8i5rfWN+Y3nzy9uLa+dG/l3sqDxUtfuXxl4auLlxePJc4yrhs3v/HZn/7wu19e/WPzYhJX4/b495ejK459fOowZc7GbLwuQuzMH4uIK1mix+vyvilDSCquB0fTKN6P4xFxJmaikW+1zcTaTyqtHDBUrUZEC6ipRP+HmirHAeXcfsB58Inx6lp7ArQ3/rH2ZyMxmc+NPthJOmZG7fnuqWMoPyvjf8/O/TK7RZ/PIcaOoZx+tp9HxGd6xZ/kdTuVf4qTxZ9G2vG4LL0QERPFazHI/H8sfyXfNtu1Per332Hi72yHLP6rxb9Z/vUjll91/ADU08trxYl8O9t6c/7LRobl+Cd6jH+me5y7jqLq818x/pssNjvO/+X5fjL/jDztGodl451bvZ9yzyDnrz++8fN+5XeO/7JbVn45FhyFV88jznWNf3+UD/SS3fZPerR/dsidAcv4+p/+fqPfvqrjb72ION9z/vNmRJul5rfWN8q8ru8n51fXmisL7fueZfz299/5db/yq44/a//oM//br/2zvI0By/jNrRfr/fZNHxh/+reJ5Haemihyvre0tfVoMWIiuVkc0pF/af+6lMeUz5HFf+ELveJPe8ZfFJU39PZbr0Z/G9+6v9PvuIHbf+/UKfO6tX+4B8riX+7z/j+o/X82YBn//vbjz3VlTZWJ/eKf2vtUyfahIwQAAAAAAID6SPPvYJN0bjedpnNz7TW8n44P0ubDza0vrj58/GA54kL+95DjaflN90x7O8m2F4u/hy23L3VtfykiTkfELxpT+fbc3YfN5aqDBwAAAAAAAAAAAAAAAAAAgHfEh8X6//I61f9qtNf/D2TrzJBrBwzdMC8wB7zb9H+or7z/p1XXAqiC8z/Ul/4P9aX/Q33p/1Bf+j/Ul/4P9aX/Q33p/wAAAABwIp3+/Mu/JBGx/bWp/JaZKPaNV1ozYNgO38dnh1IPYPQaI30Y8C7Z/erf8n+onYHG//8pfhxw+NUBKpD0yswHB639O//Lno8EAAAAAAAAAAAAAIbg/Fnr/6Gu0vhd1VUAKrJ3If/ZnQEX+vkNAHjP+el/qK+PNMf3AQGcCAet4p/cTXUN+63/BwAAAAAAAAAAAICRmc5vSTpXXAJ0OtJ0bi7i4xFxKsaT1bXmykJEfCIi/twY/1i2vVh1pQEAAAAAAAAAAAAAAAAAAOCE2Xzy9P5Ss7nyqDPx3z05JztRXgX1mJ5wMiIO96hr/XdFMvqXZSoiKm+UoSXGOnKSiO2s5UdV+uT+ZR3ybTOkRJpXo+L/mAAAAAAAAAAAAAAAAAAAoIY61h73du5XI64RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIzem+v/Hz2RHPA8VccIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyf/h8AAP//HWEzqQ==") 16.70736964s ago: executing program 5 (id=3847): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) io_uring_enter(r0, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) 14.30590765s ago: executing program 5 (id=3850): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) sendmsg$NLBL_CALIPSO_C_LIST(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x48010) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x8}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64010700) 10.376004286s ago: executing program 9 (id=3856): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) 8.434570405s ago: executing program 9 (id=3858): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0xfff}, 0x4c) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.143636739s ago: executing program 9 (id=3860): exit(0x7) fchdir(0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x700, 0x12) 6.11041133s ago: executing program 8 (id=3861): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = syz_io_uring_setup(0x111, &(0x7f0000000440)={0x0, 0x1323, 0x0, 0x4, 0x1}, &(0x7f0000001200)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x23, 0x6000, @fd_index=0x2, 0x8, 0x0, 0x0, 0xa, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x41, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 4.936180551s ago: executing program 8 (id=3862): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a9295", 0xd2}], 0x1}, 0x0) 4.37451148s ago: executing program 9 (id=3863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x140}}, 0x0) 3.980165867s ago: executing program 8 (id=3864): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x198) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$evdev(&(0x7f00000002c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x4007, {0x0, 0x1}, {0x46, 0x400}, @rumble={0xdd, 0x5}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 3.623257361s ago: executing program 9 (id=3865): socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='batadv0\x00') 2.747914051s ago: executing program 8 (id=3866): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x2663}, 0x0) 2.193210291s ago: executing program 9 (id=3867): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) munmap(&(0x7f0000605000/0x3000)=nil, 0x3000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.401259113s ago: executing program 8 (id=3868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200ffffffffffffff"], 0x1eb) 0s ago: executing program 8 (id=3869): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810880, &(0x7f0000000000)=ANY=[], 0x1, 0x2c6, &(0x7f0000000c80)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): 1476.977914][T18391] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1477.055041][T18391] EXT4-fs (loop9): 1 truncate cleaned up [ 1477.057760][T18391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1477.841894][ T9511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.110751][T18405] loop0: detected capacity change from 0 to 1024 [ 1479.113738][T18405] EXT4-fs: Ignoring removed bh option [ 1479.171386][T18405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1479.361008][ T30] audit: type=1800 audit(1746241682.266:1270): pid=18405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3402" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1479.726377][ T8987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1479.742375][T18409] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3404'. [ 1479.969907][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1479.972320][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1479.992187][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1480.000838][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1480.007707][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1482.026174][ T5798] Bluetooth: hci1: command tx timeout [ 1482.131099][T18410] chnl_net:caif_netlink_parms(): no params data found [ 1482.667671][T18431] loop9: detected capacity change from 0 to 512 [ 1482.670807][T18431] EXT4-fs: Ignoring removed bh option [ 1482.755795][T18431] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1482.816006][T18431] EXT4-fs (loop9): 1 truncate cleaned up [ 1482.818357][T18431] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1483.243812][ T9511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1483.497003][T18437] loop8: detected capacity change from 0 to 1 [ 1483.536835][T18437] buffer_io_error: 14 callbacks suppressed [ 1483.536920][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.551529][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.560022][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.568515][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.576920][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.585007][T18437] ldm_validate_partition_table(): Disk read failed. [ 1483.592249][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.600617][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.608979][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.617519][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.626131][T18437] Dev loop8: unable to read RDB block 0 [ 1483.637055][T18437] Buffer I/O error on dev loop8, logical block 0, async page read [ 1483.645705][T18437] loop8: unable to read partition table [ 1483.732280][T18437] loop8: partition table beyond EOD, truncated [ 1483.739972][T18437] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1483.828638][T18410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.840663][T18410] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.848743][T18410] bridge_slave_0: entered allmulticast mode [ 1483.858646][T18410] bridge_slave_0: entered promiscuous mode [ 1483.984532][T18410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1483.992865][T18410] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.000830][T18410] bridge_slave_1: entered allmulticast mode [ 1484.012937][T18410] bridge_slave_1: entered promiscuous mode [ 1484.116083][ T5798] Bluetooth: hci1: command tx timeout [ 1484.444667][T18410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1484.540309][T18410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.852371][T18410] team0: Port device team_slave_0 added [ 1484.973279][T18410] team0: Port device team_slave_1 added [ 1485.279456][T18450] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3416'. [ 1485.567228][T18410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1485.574609][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.605938][T18410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.828431][T18410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.837146][T18410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1485.865997][T18410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1486.185473][ T5798] Bluetooth: hci1: command tx timeout [ 1486.410474][T18410] hsr_slave_0: entered promiscuous mode [ 1486.423411][T18410] hsr_slave_1: entered promiscuous mode [ 1486.432893][T18410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1486.440948][T18410] Cannot create hsr debugfs directory [ 1486.943104][T18467] loop9: detected capacity change from 0 to 512 [ 1487.003882][T18467] EXT4-fs: Ignoring removed bh option [ 1487.078116][T18470] loop8: detected capacity change from 0 to 1 [ 1487.088591][T18467] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1487.130890][T18470] ldm_validate_partition_table(): Disk read failed. [ 1487.138423][T18470] Dev loop8: unable to read RDB block 0 [ 1487.144599][T18470] loop8: unable to read partition table [ 1487.214850][T18470] loop8: partition table beyond EOD, truncated [ 1487.222880][T18470] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1487.266193][T18467] EXT4-fs (loop9): 1 truncate cleaned up [ 1487.274619][T18467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1487.452604][ T9511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.266228][ T5798] Bluetooth: hci1: command tx timeout [ 1489.554923][T18410] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1489.658459][T18410] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1489.777162][T18410] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1489.907969][T18410] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1490.145773][T18505] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3433'. [ 1490.364664][T18507] loop0: detected capacity change from 0 to 512 [ 1490.463079][T18507] EXT4-fs: Ignoring removed bh option [ 1490.534690][T18507] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1490.661718][T18511] loop8: detected capacity change from 0 to 1 [ 1490.672687][T18511] buffer_io_error: 14 callbacks suppressed [ 1490.672763][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.683657][T18507] EXT4-fs (loop0): 1 truncate cleaned up [ 1490.691206][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.699012][T18507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1490.704405][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.727321][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.735660][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.743773][T18511] ldm_validate_partition_table(): Disk read failed. [ 1490.753062][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.761394][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.769672][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.780856][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.791531][T18511] Dev loop8: unable to read RDB block 0 [ 1490.798177][T18511] Buffer I/O error on dev loop8, logical block 0, async page read [ 1490.809450][T18511] loop8: unable to read partition table [ 1490.898171][T18511] loop8: partition table beyond EOD, truncated [ 1490.904813][T18511] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1491.073838][T10675] Bluetooth: hci0: command 0x0406 tx timeout [ 1491.278218][ T8987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.794763][T18410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1491.991827][T18410] 8021q: adding VLAN 0 to HW filter on device team0 [ 1492.061964][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1492.069679][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1492.201730][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1492.209437][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1492.718501][T18410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1495.144429][T18410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.022398][T18556] loop7: detected capacity change from 0 to 512 [ 1496.156666][T18556] EXT4-fs: Ignoring removed bh option [ 1496.249428][T18559] loop8: detected capacity change from 0 to 1 [ 1496.286542][T18556] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1496.296794][T18559] buffer_io_error: 2 callbacks suppressed [ 1496.296882][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.297057][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.297322][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.297542][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.337162][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.345442][T18559] ldm_validate_partition_table(): Disk read failed. [ 1496.352426][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.360845][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.369246][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.377651][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.386150][T18559] Dev loop8: unable to read RDB block 0 [ 1496.392078][T18559] Buffer I/O error on dev loop8, logical block 0, async page read [ 1496.400663][T18559] loop8: unable to read partition table [ 1496.523486][T18556] EXT4-fs (loop7): 1 truncate cleaned up [ 1496.534019][T18556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1496.559944][T18559] loop8: partition table beyond EOD, truncated [ 1496.570343][T18559] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1497.137056][T18569] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1497.358931][ T9782] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1498.340878][T18410] veth0_vlan: entered promiscuous mode [ 1498.453769][T18410] veth1_vlan: entered promiscuous mode [ 1498.757388][T18587] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3452'. [ 1498.902322][T18410] veth0_macvtap: entered promiscuous mode [ 1498.981708][T18591] loop9: detected capacity change from 0 to 164 [ 1498.987471][T18410] veth1_macvtap: entered promiscuous mode [ 1499.224497][T18410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.237551][T18410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.252764][T18410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.263797][T18410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.274298][T18410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.285452][T18410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.300886][T18410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.598647][T18410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.609609][T18410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.619994][T18410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.630899][T18410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.641238][T18410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1499.652176][T18410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.667656][T18410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.005930][T18410] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.015034][T18410] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.024280][T18410] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.033632][T18410] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.800365][T18609] loop0: detected capacity change from 0 to 512 [ 1500.853110][T18609] EXT4-fs: Ignoring removed bh option [ 1500.956609][T18609] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1501.047362][T18609] EXT4-fs (loop0): 1 truncate cleaned up [ 1501.055831][T18609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1501.513264][T18620] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3462'. [ 1501.627838][ T8987] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.456708][T18658] 9pnet_fd: Insufficient options for proto=fd [ 1505.071582][T18667] loop8: detected capacity change from 0 to 512 [ 1505.128945][T18667] EXT4-fs: Ignoring removed bh option [ 1505.189318][T18667] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1505.306519][T18667] EXT4-fs (loop8): 1 truncate cleaned up [ 1505.317744][T18667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1505.860413][T17016] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.672783][T18682] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.986010][T18682] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.089881][T18689] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3477'. [ 1507.421572][T18682] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.641561][T18682] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.219193][T18682] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.253847][T18682] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.293435][T18682] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.328527][T18682] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.474445][T11587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.483154][T11587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1508.870584][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1508.878979][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.627608][T18713] bio_check_eod: 3 callbacks suppressed [ 1509.627690][T18713] syz.7.3484: attempt to access beyond end of device [ 1509.627690][T18713] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1510.174508][T18718] loop9: detected capacity change from 0 to 512 [ 1510.270041][T18718] EXT4-fs: Ignoring removed bh option [ 1510.334782][T18718] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1510.725075][T18718] EXT4-fs (loop9): 1 truncate cleaned up [ 1510.733521][T18718] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1511.126832][T18243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.238984][ T9511] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.806707][T18739] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.899091][T18747] netlink: 144 bytes leftover after parsing attributes in process `syz.9.3490'. [ 1512.165770][T18739] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.366591][T18739] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.645919][T18739] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.071736][T18739] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.082062][T18761] program syz.8.3496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1513.123082][T18739] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.157350][T18739] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.191112][T18739] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.326762][T18777] loop7: detected capacity change from 0 to 512 [ 1514.358542][T18777] EXT4-fs: Ignoring removed bh option [ 1514.413819][T18777] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1514.482501][T18777] EXT4-fs (loop7): 1 truncate cleaned up [ 1514.492311][T18777] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1514.642495][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.990330][ T9782] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.651836][T18800] loop7: detected capacity change from 0 to 128 [ 1515.817667][T18800] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1515.936312][T18800] ext4 filesystem being mounted at /505/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.029466][T18805] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3509'. [ 1516.043068][ T30] audit: type=1326 audit(1746241718.946:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.068495][ T30] audit: type=1326 audit(1746241718.946:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.092880][ T30] audit: type=1326 audit(1746241718.956:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.118303][ T30] audit: type=1326 audit(1746241718.996:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.301114][ T30] audit: type=1326 audit(1746241719.206:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.332524][T18808] loop8: detected capacity change from 0 to 1764 [ 1516.346098][ T30] audit: type=1326 audit(1746241719.236:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.372223][ T30] audit: type=1326 audit(1746241719.236:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.396602][ T30] audit: type=1326 audit(1746241719.246:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.420089][ T30] audit: type=1326 audit(1746241719.246:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.444828][ T30] audit: type=1326 audit(1746241719.246:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18806 comm="syz.8.3512" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1516.536271][T18813] IPv6: Can't replace route, no match found [ 1516.560341][ T9782] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1518.555067][T18846] netlink: 'syz.7.3523': attribute type 4 has an invalid length. [ 1518.565612][T18846] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3523'. [ 1518.760125][T18849] loop9: detected capacity change from 0 to 128 [ 1518.918535][T18849] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1518.965978][T18849] ext4 filesystem being mounted at /573/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.493666][ T9511] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1519.593990][T18859] netlink: 'syz.7.3527': attribute type 3 has an invalid length. [ 1519.665364][T18861] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3528'. [ 1520.576505][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1520.597042][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1520.626784][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1520.643994][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1520.663959][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1521.084451][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3532'. [ 1521.096847][T18875] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3532'. [ 1522.054146][T18885] netlink: 'syz.5.3536': attribute type 4 has an invalid length. [ 1522.062461][T18885] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3536'. [ 1522.573886][T18894] loop5: detected capacity change from 0 to 128 [ 1522.708792][T18894] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1522.750510][ T5798] Bluetooth: hci2: command tx timeout [ 1522.816264][T18894] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1523.288966][T18904] loop8: detected capacity change from 0 to 1 [ 1523.312175][T18901] loop7: detected capacity change from 0 to 128 [ 1523.341712][T18904] buffer_io_error: 2 callbacks suppressed [ 1523.341797][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.360584][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.369110][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.377925][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.386398][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.394479][T18904] ldm_validate_partition_table(): Disk read failed. [ 1523.401633][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.410226][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.418594][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.426948][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.435476][T18904] Dev loop8: unable to read RDB block 0 [ 1523.441404][T18904] Buffer I/O error on dev loop8, logical block 0, async page read [ 1523.452487][T18904] loop8: unable to read partition table [ 1523.520225][T18410] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1523.538435][T18904] loop8: partition table beyond EOD, truncated [ 1523.545056][T18904] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1523.908330][T18869] chnl_net:caif_netlink_parms(): no params data found [ 1524.217290][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3542'. [ 1524.393293][T18912] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1524.403355][T18912] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1524.561571][T18916] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3544'. [ 1524.572976][T18916] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3544'. [ 1524.836933][ T5798] Bluetooth: hci2: command tx timeout [ 1525.466122][T18930] netlink: 'syz.7.3547': attribute type 4 has an invalid length. [ 1525.474402][T18930] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3547'. [ 1525.563235][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.588324][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.332188][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.408228][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.449929][ T84] bond0 (unregistering): Released all slaves [ 1526.473616][ T84] bond1 (unregistering): Released all slaves [ 1526.497268][ T84] bond2 (unregistering): Released all slaves [ 1526.688172][T18936] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3549'. [ 1526.854026][T18944] loop9: detected capacity change from 0 to 128 [ 1526.916046][ T5798] Bluetooth: hci2: command tx timeout [ 1527.161973][T18944] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1527.214411][T18869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.222360][T18869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.230664][T18869] bridge_slave_0: entered allmulticast mode [ 1527.243567][T18869] bridge_slave_0: entered promiscuous mode [ 1527.304629][T18944] ext4 filesystem being mounted at /579/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.496102][T18869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.503746][T18869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.511782][T18869] bridge_slave_1: entered allmulticast mode [ 1527.521944][T18869] bridge_slave_1: entered promiscuous mode [ 1527.798564][T18958] loop8: detected capacity change from 0 to 1 [ 1527.840069][T18958] ldm_validate_partition_table(): Disk read failed. [ 1527.847955][T18958] Dev loop8: unable to read RDB block 0 [ 1527.856137][T18958] loop8: unable to read partition table [ 1527.889129][ T9511] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1527.986572][T18958] loop8: partition table beyond EOD, truncated [ 1527.993101][T18958] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1528.232451][T18869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1528.694520][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.722731][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.796519][ T84] pim6reg (unregistering): left allmulticast mode [ 1528.988139][ T5798] Bluetooth: hci2: command tx timeout [ 1529.211426][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1529.211510][ T30] audit: type=1326 audit(1746241732.116:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18967 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1529.347990][ T30] audit: type=1326 audit(1746241732.196:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18967 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1529.517506][ T30] audit: type=1326 audit(1746241732.416:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18967 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1529.780416][T18869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1529.793811][T18969] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3558'. [ 1529.856923][T18968] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3558'. [ 1529.873712][ T30] audit: type=1326 audit(1746241732.766:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18967 comm="syz.5.3558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1529.877972][T18980] netlink: 'syz.7.3561': attribute type 4 has an invalid length. [ 1529.909177][T18980] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.3561'. [ 1530.421402][T18869] team0: Port device team_slave_0 added [ 1530.500784][T18869] team0: Port device team_slave_1 added [ 1530.977537][T18869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1530.984897][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1531.013439][T18869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1531.139884][T18869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1531.147496][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1531.174151][T18869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1531.547776][ T30] audit: type=1326 audit(1746241734.426:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.9.3565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1531.571641][ T30] audit: type=1326 audit(1746241734.426:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.9.3565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1531.750286][T18869] hsr_slave_0: entered promiscuous mode [ 1531.761081][T18869] hsr_slave_1: entered promiscuous mode [ 1531.770527][T18869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1531.778637][T18869] Cannot create hsr debugfs directory [ 1531.786743][ T30] audit: type=1326 audit(1746241734.666:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.9.3565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1531.810349][ T30] audit: type=1326 audit(1746241734.686:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.9.3565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1531.833963][ T30] audit: type=1326 audit(1746241734.686:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.9.3565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1531.857214][ T30] audit: type=1326 audit(1746241734.696:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18994 comm="syz.9.3565" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1532.054719][T18995] random: crng reseeded on system resumption [ 1532.509622][T19009] loop8: detected capacity change from 0 to 1 [ 1532.549761][T19009] buffer_io_error: 14 callbacks suppressed [ 1532.549849][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.569092][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.578228][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.588880][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.597188][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.605514][T19009] ldm_validate_partition_table(): Disk read failed. [ 1532.612437][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.623029][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.633153][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.642672][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.653303][T19009] Dev loop8: unable to read RDB block 0 [ 1532.659387][T19009] Buffer I/O error on dev loop8, logical block 0, async page read [ 1532.671310][T19009] loop8: unable to read partition table [ 1532.724428][T19009] loop8: partition table beyond EOD, truncated [ 1532.731218][T19009] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1533.234784][T19016] netlink: 'syz.7.3571': attribute type 1 has an invalid length. [ 1533.358544][T19018] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3571'. [ 1533.368061][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3571'. [ 1533.608867][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1533.684374][T19023] netlink: 'syz.5.3572': attribute type 4 has an invalid length. [ 1533.695001][T19023] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3572'. [ 1533.783237][T19025] bond4 (unregistering): Released all slaves [ 1534.640027][T18869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1534.744365][T18869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1534.846858][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1534.846934][ T30] audit: type=1326 audit(1746241737.756:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1534.876134][ T30] audit: type=1326 audit(1746241737.756:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1534.881350][T18869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1534.898841][ T30] audit: type=1326 audit(1746241737.756:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1534.899105][ T30] audit: type=1326 audit(1746241737.756:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1534.899357][ T30] audit: type=1326 audit(1746241737.756:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1534.899603][ T30] audit: type=1326 audit(1746241737.756:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1534.899878][ T30] audit: type=1326 audit(1746241737.756:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1534.900138][ T30] audit: type=1326 audit(1746241737.756:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1534.900394][ T30] audit: type=1326 audit(1746241737.756:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1535.094761][ T30] audit: type=1326 audit(1746241737.956:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.8.3576" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1535.781372][T18869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1536.508793][T19049] random: crng reseeded on system resumption [ 1536.961228][T19059] loop8: detected capacity change from 0 to 1 [ 1537.017253][T19059] ldm_validate_partition_table(): Disk read failed. [ 1537.024482][T19059] Dev loop8: unable to read RDB block 0 [ 1537.033371][T19059] loop8: unable to read partition table [ 1537.104497][T19059] loop8: partition table beyond EOD, truncated [ 1537.112968][T19059] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1537.490316][T18869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.867846][T18869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.959602][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.967379][T13256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1538.104882][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.112612][T13256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1538.232202][T19069] netlink: 'syz.9.3584': attribute type 4 has an invalid length. [ 1538.240792][T19069] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.3584'. [ 1538.837799][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3585'. [ 1538.920614][T19075] netlink: 'syz.7.3586': attribute type 1 has an invalid length. [ 1539.119935][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3586'. [ 1539.130191][T19075] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3586'. [ 1539.292231][T19075] bond4 (unregistering): Released all slaves [ 1540.386267][T19097] loop8: detected capacity change from 0 to 128 [ 1540.427166][T19098] loop7: detected capacity change from 0 to 128 [ 1540.452872][T18869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.545606][T19097] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1540.614728][T19098] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1540.641278][T19097] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.726085][T19098] ext4 filesystem being mounted at /527/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1540.913274][T18869] veth0_vlan: entered promiscuous mode [ 1541.038050][T18869] veth1_vlan: entered promiscuous mode [ 1541.270367][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 1541.270446][ T30] audit: type=1326 audit(1746241744.176:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.302179][ T30] audit: type=1326 audit(1746241744.206:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.385025][T17016] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1541.400024][T18869] veth0_macvtap: entered promiscuous mode [ 1541.418894][ T30] audit: type=1326 audit(1746241744.316:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19110 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.421281][ T9782] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1541.531588][ T30] audit: type=1326 audit(1746241744.406:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.556500][ T30] audit: type=1326 audit(1746241744.406:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.586646][T18869] veth1_macvtap: entered promiscuous mode [ 1541.779423][ T30] audit: type=1326 audit(1746241744.486:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19110 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.802230][ T30] audit: type=1326 audit(1746241744.566:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.825289][ T30] audit: type=1326 audit(1746241744.566:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.836168][T18869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.847867][ T30] audit: type=1326 audit(1746241744.566:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.860797][T18869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.883553][ T30] audit: type=1326 audit(1746241744.586:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19106 comm="syz.9.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1541.896230][T18869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.931044][T18869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.942359][T18869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.956659][T18869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.966863][T18869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.977754][T18869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.998594][T18869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1542.073495][T19107] random: crng reseeded on system resumption [ 1542.340714][T19116] netlink: 'syz.8.3596': attribute type 4 has an invalid length. [ 1542.349121][T19116] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3596'. [ 1542.432745][T18869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.443914][T18869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.454163][T18869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.467683][T18869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.467816][T18869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.467911][T18869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.468003][T18869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1542.515972][T18869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1542.533921][T18869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1542.731161][T18869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.743652][T18869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.752885][T18869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.762086][T18869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.253806][T19122] batman_adv: batadv0: Adding interface: dummy0 [ 1543.262850][T19122] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.290776][T19122] batman_adv: batadv0: Interface activated: dummy0 [ 1543.418859][T19129] batadv0: mtu less than device minimum [ 1543.427293][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.440628][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.453959][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.467329][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.480558][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.493641][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.507012][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.520301][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.533555][T19129] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1543.667717][T19130] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.3599'. [ 1543.987775][T19135] netlink: 'syz.9.3600': attribute type 1 has an invalid length. [ 1544.258889][T19135] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3600'. [ 1544.269541][T19135] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3600'. [ 1544.453555][T19137] bond6 (unregistering): Released all slaves [ 1544.657774][T19142] loop7: detected capacity change from 0 to 1764 [ 1544.854837][T19145] loop8: detected capacity change from 0 to 1 [ 1544.880899][T19145] buffer_io_error: 14 callbacks suppressed [ 1544.880983][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.895732][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.904125][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.912637][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.921564][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.929897][T19145] ldm_validate_partition_table(): Disk read failed. [ 1544.936995][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.945514][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.956304][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.964514][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.973649][T19145] Dev loop8: unable to read RDB block 0 [ 1544.979779][T19145] Buffer I/O error on dev loop8, logical block 0, async page read [ 1544.989693][T19145] loop8: unable to read partition table [ 1545.021080][T19145] loop8: partition table beyond EOD, truncated [ 1545.027865][T19145] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1545.356687][T19151] loop9: detected capacity change from 0 to 128 [ 1545.471448][T19151] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1545.499933][T19151] ext4 filesystem being mounted at /591/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1545.878584][T19159] netlink: 'syz.5.3607': attribute type 4 has an invalid length. [ 1545.887017][T19159] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3607'. [ 1545.941109][ T9511] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1546.475023][ T30] kauditd_printk_skb: 138 callbacks suppressed [ 1546.475103][ T30] audit: type=1326 audit(1746241749.376:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.579001][ T30] audit: type=1326 audit(1746241749.416:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.605085][ T30] audit: type=1326 audit(1746241749.446:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.630011][ T30] audit: type=1326 audit(1746241749.486:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.652632][ T30] audit: type=1326 audit(1746241749.486:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.676247][ T30] audit: type=1326 audit(1746241749.486:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.699503][ T30] audit: type=1326 audit(1746241749.486:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.723784][ T30] audit: type=1326 audit(1746241749.486:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.747893][ T30] audit: type=1326 audit(1746241749.486:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 1546.771015][ T30] audit: type=1326 audit(1746241749.516:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.9.3609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f42558 code=0x7ffc0000 [ 1546.845399][T19173] loop5: detected capacity change from 0 to 512 [ 1546.909282][T19173] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1546.947551][T19168] random: crng reseeded on system resumption [ 1547.181901][T19173] EXT4-fs (loop5): 1 truncate cleaned up [ 1547.190468][T19173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1547.476752][T19173] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.5.3612: corrupted xattr block 33: invalid header [ 1547.559548][T19173] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.3612: corrupted xattr block 33: invalid header [ 1547.596624][T19173] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117) [ 1547.638512][T19184] netlink: 'syz.7.3614': attribute type 1 has an invalid length. [ 1547.798788][T19186] loop9: detected capacity change from 0 to 7 [ 1547.827232][T19184] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3614'. [ 1547.878008][T19186] ldm_validate_partition_table(): Disk read failed. [ 1547.885714][T19186] Dev loop9: unable to read RDB block 0 [ 1547.891978][T19186] loop9: unable to read partition table [ 1547.908783][T19186] loop9: partition table beyond EOD, truncated [ 1547.918725][T19186] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1547.918725][T19186] Uªÿÿÿÿÿÿ) failed (rc=-5) [ 1547.942998][T19184] bond4 (unregistering): Released all slaves [ 1548.172848][T18410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1548.707188][T19194] loop8: detected capacity change from 0 to 1 [ 1548.736461][T19194] ldm_validate_partition_table(): Disk read failed. [ 1548.745752][T19194] Dev loop8: unable to read RDB block 0 [ 1548.753335][T19194] loop8: unable to read partition table [ 1548.800349][T19194] loop8: partition table beyond EOD, truncated [ 1548.807287][T19194] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1548.825015][T19198] loop7: detected capacity change from 0 to 128 [ 1548.901662][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.912733][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.039339][T19198] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1549.076972][T19198] ext4 filesystem being mounted at /534/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1549.109512][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.118191][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.420162][ T9782] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1549.567690][T19207] netlink: 'syz.8.3621': attribute type 4 has an invalid length. [ 1549.576081][T19207] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3621'. [ 1550.069022][T19206] loop5: detected capacity change from 0 to 1024 [ 1550.119452][T19213] IPv6: Can't replace route, no match found [ 1550.178209][T19206] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1550.235020][T19206] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1550.243567][T19206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 1550.395593][T19206] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1550.458476][T19206] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1550.476053][T19217] random: crng reseeded on system resumption [ 1550.542371][T19206] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.3620: mark_inode_dirty error [ 1550.616847][T19206] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3620: Invalid block bitmap block 3 in block_group 0 [ 1550.764653][T19206] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3620: Invalid block bitmap block 3 in block_group 0 [ 1550.819717][T19206] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3620: Invalid block bitmap block 3 in block_group 0 [ 1550.896728][T19206] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1550.931679][T19206] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.3620: mark_inode_dirty error [ 1550.968422][T19206] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm syz.5.3620: lblock 6 mapped to illegal pblock 1 (length 1) [ 1551.037957][T19206] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.3620: lblock 0 mapped to illegal pblock 48 (length 1) [ 1551.052370][T19222] loop7: detected capacity change from 0 to 512 [ 1551.100502][T19206] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3620: Failed to acquire dquot type 0 [ 1551.102428][T19222] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1551.127062][T19226] netlink: 'syz.9.3627': attribute type 1 has an invalid length. [ 1551.218314][T19206] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 49: comm syz.5.3620: lblock 1 mapped to illegal pblock 49 (length 1) [ 1551.260717][T19222] EXT4-fs (loop7): 1 truncate cleaned up [ 1551.271713][T19222] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1551.321497][T19206] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3620: Failed to acquire dquot type 0 [ 1551.322771][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3627'. [ 1551.371201][T19206] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1551.406290][T19206] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #15: comm syz.5.3620: mark_inode_dirty error [ 1551.458674][T19206] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 1551.469775][T19206] EXT4-fs (loop5): 1 orphan inode deleted [ 1551.479465][T19206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1551.501549][T19226] bond6 (unregistering): Released all slaves [ 1551.559683][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 1551.559770][ T30] audit: type=1326 audit(1746241754.416:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1551.589292][ T30] audit: type=1326 audit(1746241754.416:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=12 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1551.613826][ T30] audit: type=1326 audit(1746241754.416:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1551.637242][ T30] audit: type=1326 audit(1746241754.416:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1551.664452][ T30] audit: type=1326 audit(1746241754.416:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1551.696605][T19232] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.7.3625: corrupted xattr block 33: invalid header [ 1551.798293][T19232] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.3625: corrupted xattr block 33: invalid header [ 1551.930947][T19224] loop0: detected capacity change from 0 to 128 [ 1551.939622][T19232] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -117) [ 1551.974556][ T30] audit: type=1326 audit(1746241754.636:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1552.000145][ T30] audit: type=1326 audit(1746241754.676:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1552.026032][ T30] audit: type=1326 audit(1746241754.686:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1552.052441][ T30] audit: type=1326 audit(1746241754.786:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1552.077600][ T30] audit: type=1326 audit(1746241754.786:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.5.3620" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1552.100611][T19224] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1552.196199][T19224] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1552.287916][T19224] netlink: 536 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1552.297832][T19224] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1552.369572][ T9782] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.397218][T19206] syz.5.3620 (19206) used greatest stack depth: 2288 bytes left [ 1552.496194][T18410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.912671][T18869] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1553.535651][T19247] loop0: detected capacity change from 0 to 512 [ 1553.648293][T19247] EXT4-fs: Ignoring removed bh option [ 1553.745535][T19247] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1553.841900][T19247] EXT4-fs (loop0): 1 truncate cleaned up [ 1553.853341][T19247] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1554.134974][T18869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.549446][T19258] netlink: 'syz.0.3639': attribute type 1 has an invalid length. [ 1554.620986][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3639'. [ 1554.656867][T19260] loop7: detected capacity change from 0 to 512 [ 1554.749256][T19260] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal [ 1554.860161][T19257] random: crng reseeded on system resumption [ 1555.255082][T19260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.265355][T19260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.995530][T19260] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.004436][T19260] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.017720][T19260] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.027470][T19260] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.067218][T19280] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3648'. [ 1557.133455][T10675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1557.198609][T10675] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1557.227296][T10675] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1557.247937][T19282] loop7: detected capacity change from 0 to 512 [ 1557.271592][T10675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1557.284665][T10675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1557.295964][T19282] EXT4-fs: Ignoring removed bh option [ 1557.336849][T19282] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1557.758610][T19282] EXT4-fs (loop7): 1 truncate cleaned up [ 1557.768808][T19282] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1557.956936][T19290] IPv6: Can't replace route, no match found [ 1558.442674][ T9782] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.885939][T19297] netlink: 'syz.0.3654': attribute type 1 has an invalid length. [ 1559.047386][T19297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1559.387245][T10675] Bluetooth: hci3: command tx timeout [ 1559.522416][T19283] chnl_net:caif_netlink_parms(): no params data found [ 1559.629029][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 1559.629114][ T30] audit: type=1326 audit(1746241762.526:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1559.660655][ T30] audit: type=1326 audit(1746241762.526:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1559.871373][ T30] audit: type=1326 audit(1746241762.596:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1559.896448][ T30] audit: type=1326 audit(1746241762.726:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19307 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1559.922354][ T30] audit: type=1326 audit(1746241762.776:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1559.946105][ T30] audit: type=1326 audit(1746241762.776:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1559.971274][ T30] audit: type=1326 audit(1746241762.826:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1559.994112][ T30] audit: type=1326 audit(1746241762.826:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1560.018973][ T30] audit: type=1326 audit(1746241762.826:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1560.047001][ T30] audit: type=1326 audit(1746241762.866:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19304 comm="syz.5.3657" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1560.309899][T19305] random: crng reseeded on system resumption [ 1561.468094][T10675] Bluetooth: hci3: command tx timeout [ 1561.473350][T19283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.481408][T19283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.489486][T19283] bridge_slave_0: entered allmulticast mode [ 1561.502435][T19283] bridge_slave_0: entered promiscuous mode [ 1561.576506][ T3607] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.662782][T19283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.671620][T19283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.679702][T19283] bridge_slave_1: entered allmulticast mode [ 1561.689659][T19283] bridge_slave_1: entered promiscuous mode [ 1561.713226][ T3607] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.841609][T19318] loop8: detected capacity change from 0 to 512 [ 1562.110196][T19330] loop7: detected capacity change from 0 to 512 [ 1562.149623][T19330] EXT4-fs: Ignoring removed bh option [ 1562.212322][T19330] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1562.576547][ T3607] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.614695][T19330] EXT4-fs (loop7): 1 truncate cleaned up [ 1562.623085][T19330] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1562.638484][T19318] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3660: bg 0: block 248: padding at end of block bitmap is not set [ 1562.674930][T19318] EXT4-fs error (device loop8): ext4_acquire_dquot:6935: comm syz.8.3660: Failed to acquire dquot type 1 [ 1562.942671][T19318] EXT4-fs (loop8): 1 truncate cleaned up [ 1562.951313][T19318] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1562.964699][T19318] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.239625][ T9782] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.441478][ T3607] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.546549][T10675] Bluetooth: hci3: command tx timeout [ 1563.668466][T19283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.852699][T19283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1564.215404][T17016] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.334162][T19350] tipc: Started in network mode [ 1564.341877][T19350] tipc: Node identity e6d255ac5b0b, cluster identity 4711 [ 1564.350490][T19350] tipc: Enabled bearer , priority 0 [ 1564.359709][ T3607] bridge_slave_1: left allmulticast mode [ 1564.368204][ T3607] bridge_slave_1: left promiscuous mode [ 1564.375015][ T3607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.469283][ T3607] bridge_slave_0: left promiscuous mode [ 1564.476887][ T3607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.182400][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1565.182484][ T30] audit: type=1326 audit(1746241768.086:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.214787][ T30] audit: type=1326 audit(1746241768.086:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.242988][ T30] audit: type=1326 audit(1746241768.086:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.297892][ T30] audit: type=1326 audit(1746241768.186:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19359 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.320801][ T30] audit: type=1326 audit(1746241768.196:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.349150][ T30] audit: type=1326 audit(1746241768.196:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.372921][ T30] audit: type=1326 audit(1746241768.246:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.397806][ T30] audit: type=1326 audit(1746241768.246:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.420479][ T30] audit: type=1326 audit(1746241768.246:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.449837][ T30] audit: type=1326 audit(1746241768.246:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19355 comm="syz.8.3672" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1565.476666][ T5852] tipc: Node number set to 3185137068 [ 1565.496672][ T3607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.498040][T19358] random: crng reseeded on system resumption [ 1565.554442][ T3607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.599367][ T3607] bond0 (unregistering): Released all slaves [ 1565.626320][ T3607] bond1 (unregistering): Released all slaves [ 1565.762792][T10675] Bluetooth: hci3: command tx timeout [ 1565.838221][ T3607] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 1565.861363][ T3607] bond2 (unregistering): Released all slaves [ 1565.896423][ T3607] bond3 (unregistering): (slave batadv2): Releasing backup interface [ 1565.940687][ T3607] bond3 (unregistering): Released all slaves [ 1565.974696][ T3607] bond4 (unregistering): (slave batadv3): Releasing backup interface [ 1565.977037][T19363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1566.003538][ T3607] bond4 (unregistering): Released all slaves [ 1566.029663][ T3607] bond5 (unregistering): Released all slaves [ 1566.299057][T19353] tipc: Disabling bearer [ 1566.409069][T19283] team0: Port device team_slave_0 added [ 1566.481686][T19283] team0: Port device team_slave_1 added [ 1566.969918][T19283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.979283][T19283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.005979][T19283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1567.144614][T19283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1567.152963][T19283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1567.181954][T19283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.048344][ T3607] hsr_slave_0: left promiscuous mode [ 1568.050020][T19376] loop0: detected capacity change from 0 to 128 [ 1568.056916][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.068214][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.112427][ T3607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.120629][ T3607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.156017][ T3607] veth1_macvtap: left promiscuous mode [ 1568.162137][ T3607] veth1_vlan: left promiscuous mode [ 1568.170191][ T3607] veth0_vlan: left promiscuous mode [ 1568.203727][T19376] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1568.346814][T19376] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1568.462746][ T3607] pim6reg (unregistering): left allmulticast mode [ 1568.902219][T18869] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1569.723044][T19283] hsr_slave_0: entered promiscuous mode [ 1569.740484][T19283] hsr_slave_1: entered promiscuous mode [ 1569.751752][T19283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1569.759782][T19283] Cannot create hsr debugfs directory [ 1569.778828][T19390] syz.0.3684: attempt to access beyond end of device [ 1569.778828][T19390] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1570.208164][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 1570.208246][ T30] audit: type=1326 audit(1746241773.116:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1570.389511][ T30] audit: type=1326 audit(1746241773.196:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1570.412840][ T30] audit: type=1326 audit(1746241773.216:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1570.435709][ T30] audit: type=1326 audit(1746241773.266:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1570.460050][ T30] audit: type=1326 audit(1746241773.266:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19396 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1570.483331][ T30] audit: type=1326 audit(1746241773.296:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1570.506525][ T30] audit: type=1326 audit(1746241773.296:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1570.529238][ T30] audit: type=1326 audit(1746241773.396:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1570.794344][T19394] random: crng reseeded on system resumption [ 1571.194379][ T30] audit: type=1326 audit(1746241773.506:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1571.217556][ T30] audit: type=1326 audit(1746241773.566:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.7.3685" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 1572.388620][T19283] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1572.487165][T19283] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1572.603133][T19283] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1572.690270][T19283] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1573.152427][T19421] syz.8.3697: attempt to access beyond end of device [ 1573.152427][T19421] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1573.200298][T19424] bridge_slave_0: left allmulticast mode [ 1573.209241][T19424] bridge_slave_0: left promiscuous mode [ 1573.222516][T19424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.270568][T19424] bridge_slave_1: left allmulticast mode [ 1573.276809][T19424] bridge_slave_1: left promiscuous mode [ 1573.283745][T19424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.471976][T19424] bond0: (slave bond_slave_0): Releasing backup interface [ 1573.644759][T19424] bond0: (slave bond_slave_1): Releasing backup interface [ 1573.741782][T19424] bond1: (slave batadv1): Releasing backup interface [ 1573.832412][T19424] bond2: (slave batadv2): Releasing backup interface [ 1574.583381][T19283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.772399][T19283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.871031][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.879027][T13256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.973308][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.981072][T13256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.072822][T19436] random: crng reseeded on system resumption [ 1575.627967][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 1575.628052][ T30] audit: type=1326 audit(1746241778.536:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19435 comm="syz.8.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1575.658695][ T30] audit: type=1326 audit(1746241778.536:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19435 comm="syz.8.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1575.683052][ T30] audit: type=1326 audit(1746241778.536:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19435 comm="syz.8.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1575.796091][T19446] loop0: detected capacity change from 0 to 128 [ 1575.840796][T19446] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1575.889128][T19446] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1575.906736][ T30] audit: type=1326 audit(1746241778.716:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19435 comm="syz.8.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1575.929976][ T30] audit: type=1326 audit(1746241778.716:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19435 comm="syz.8.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1575.952811][ T30] audit: type=1326 audit(1746241778.716:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19435 comm="syz.8.3703" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1576.093384][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.427128][T11587] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1576.814407][T19454] syz.0.3709: attempt to access beyond end of device [ 1576.814407][T19454] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1577.232304][T19283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.446056][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3712'. [ 1578.380732][T19476] loop0: detected capacity change from 0 to 512 [ 1578.428446][T19476] EXT4-fs: Ignoring removed bh option [ 1578.477813][T19476] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1578.589515][T19476] EXT4-fs (loop0): 1 truncate cleaned up [ 1578.600296][T19476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.934337][ T30] audit: type=1326 audit(1746241781.826:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1578.958972][ T30] audit: type=1326 audit(1746241781.836:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1579.209525][ T30] audit: type=1326 audit(1746241781.986:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19486 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1579.235828][ T30] audit: type=1326 audit(1746241782.006:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1579.312638][T19485] random: crng reseeded on system resumption [ 1579.329310][T18869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.432116][T19283] veth0_vlan: entered promiscuous mode [ 1579.576595][T19283] veth1_vlan: entered promiscuous mode [ 1580.037652][T19283] veth0_macvtap: entered promiscuous mode [ 1580.164407][T19283] veth1_macvtap: entered promiscuous mode [ 1580.534122][T19283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.546547][T19283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.556996][T19283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.567908][T19283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.578748][T19283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.591915][T19283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.602842][T19283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1580.613800][T19283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1580.629724][T19283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1580.767328][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1580.767417][ T30] audit: type=1326 audit(1746241783.596:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1580.797992][ T30] audit: type=1326 audit(1746241783.596:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ae567 code=0x7ffc0000 [ 1580.821484][ T30] audit: type=1326 audit(1746241783.596:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1580.844767][ T30] audit: type=1326 audit(1746241783.626:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1580.867897][ T30] audit: type=1326 audit(1746241783.636:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ae567 code=0x7ffc0000 [ 1581.002886][T19497] IPv6: Can't replace route, no match found [ 1581.358308][ T30] audit: type=1326 audit(1746241783.836:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1581.382012][ T30] audit: type=1326 audit(1746241783.836:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ae567 code=0x7ffc0000 [ 1581.405728][ T30] audit: type=1326 audit(1746241783.836:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1581.430231][ T30] audit: type=1326 audit(1746241783.846:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1581.453547][ T30] audit: type=1326 audit(1746241783.846:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19483 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ae567 code=0x7ffc0000 [ 1581.798626][T19283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.809876][T19283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.822533][T19283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.834160][T19283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.846993][T19283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.857915][T19283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.868168][T19283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1581.879526][T19283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1581.895646][T19283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.223143][T19283] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.234984][T19283] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.244779][T19283] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.253968][T19283] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.807237][T19524] loop7: detected capacity change from 0 to 512 [ 1585.843052][T19524] EXT4-fs: Ignoring removed bh option [ 1585.941006][T19524] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1586.084145][T19524] EXT4-fs (loop7): 1 truncate cleaned up [ 1586.092833][T19524] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1587.118782][ T9782] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.273637][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1587.273723][ T30] audit: type=1326 audit(1746241790.176:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.358247][T19537] IPv6: Can't replace route, no match found [ 1587.524227][ T30] audit: type=1326 audit(1746241790.216:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.682438][ T30] audit: type=1326 audit(1746241790.466:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19538 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.705540][ T30] audit: type=1326 audit(1746241790.526:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.728557][ T30] audit: type=1326 audit(1746241790.526:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.751482][ T30] audit: type=1326 audit(1746241790.566:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.775808][ T30] audit: type=1326 audit(1746241790.566:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.799545][ T30] audit: type=1326 audit(1746241790.566:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.822251][ T30] audit: type=1326 audit(1746241790.576:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19534 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1587.921843][ T30] audit: type=1326 audit(1746241790.786:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19538 comm="syz.8.3733" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1588.203221][T19536] random: crng reseeded on system resumption [ 1589.078189][T19552] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3738'. [ 1589.129154][T19551] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3738'. [ 1590.298303][T19569] loop0: detected capacity change from 0 to 512 [ 1590.394224][T19569] EXT4-fs: Ignoring removed bh option [ 1590.412436][T19569] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1590.454857][T11595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.463324][T11595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.613103][T19569] EXT4-fs (loop0): 1 truncate cleaned up [ 1590.626889][T19569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1590.709980][T11587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.718466][T11587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.189164][T18869] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.584289][T19580] random: crng reseeded on system resumption [ 1592.276031][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 1592.276112][ T30] audit: type=1326 audit(1746241795.176:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1592.308712][ T30] audit: type=1326 audit(1746241795.186:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1592.331401][ T30] audit: type=1326 audit(1746241795.186:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ae567 code=0x7ffc0000 [ 1592.354351][ T30] audit: type=1326 audit(1746241795.186:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1592.380716][ T30] audit: type=1326 audit(1746241795.186:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1592.404137][ T30] audit: type=1326 audit(1746241795.186:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ae567 code=0x7ffc0000 [ 1592.426992][ T30] audit: type=1326 audit(1746241795.186:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1592.450030][ T30] audit: type=1326 audit(1746241795.186:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1592.450317][ T30] audit: type=1326 audit(1746241795.216:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf70ae567 code=0x7ffc0000 [ 1592.450597][ T30] audit: type=1326 audit(1746241795.216:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19579 comm="syz.5.3749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1593.121730][T19604] syz.7.3755: attempt to access beyond end of device [ 1593.121730][T19604] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1593.813091][T19613] IPv6: Can't replace route, no match found [ 1593.860512][T19614] loop5: detected capacity change from 0 to 512 [ 1593.917593][T19614] EXT4-fs: Ignoring removed bh option [ 1593.971279][T19614] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1594.124538][T19614] EXT4-fs (loop5): 1 truncate cleaned up [ 1594.134015][T19614] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1594.703494][T18410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.249101][T19647] syz.5.3771: attempt to access beyond end of device [ 1596.249101][T19647] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1596.464378][T19639] random: crng reseeded on system resumption [ 1597.296560][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 1597.296647][ T30] audit: type=1326 audit(1746241800.196:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1597.330035][ T30] audit: type=1326 audit(1746241800.196:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1597.353012][ T30] audit: type=1326 audit(1746241800.196:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1597.376225][ T30] audit: type=1326 audit(1746241800.276:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1597.401098][ T30] audit: type=1326 audit(1746241800.276:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1597.424656][ T30] audit: type=1326 audit(1746241800.276:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1597.637562][T19651] IPv6: Can't replace route, no match found [ 1597.936657][ T30] audit: type=1326 audit(1746241800.356:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1597.959408][ T30] audit: type=1326 audit(1746241800.396:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1597.981973][ T30] audit: type=1326 audit(1746241800.396:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 1598.005803][ T30] audit: type=1326 audit(1746241800.396:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19638 comm="syz.8.3769" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf710e567 code=0x7ffc0000 [ 1598.472373][T19657] loop5: detected capacity change from 0 to 512 [ 1598.499711][T19657] EXT4-fs: Ignoring removed bh option [ 1598.542694][T19653] C: renamed from veth0_to_batadv (while UP) [ 1598.553185][T19657] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1598.589524][T19653] netlink: 'syz.9.3775': attribute type 1 has an invalid length. [ 1598.598927][T19653] netlink: 152 bytes leftover after parsing attributes in process `syz.9.3775'. [ 1598.614020][T19653] net_ratelimit: 10 callbacks suppressed [ 1598.614099][T19653] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1598.756262][T19657] EXT4-fs (loop5): 1 truncate cleaned up [ 1598.764510][T19657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1598.971063][T19657] 9pnet: p9_errstr2errno: server reported unknown error í [ 1599.378277][T18410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1599.967847][T19668] ieee802154 phy0 wpan0: encryption failed: -22 [ 1600.892771][T19680] syz.9.3783: attempt to access beyond end of device [ 1600.892771][T19680] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1602.027746][T19686] IPv6: Can't replace route, no match found [ 1602.377810][T19691] IPv6: NLM_F_CREATE should be specified when creating new route [ 1602.526444][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1602.526524][ T30] audit: type=1326 audit(1746241805.426:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.556232][ T30] audit: type=1326 audit(1746241805.436:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.825506][ T30] audit: type=1326 audit(1746241805.516:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.848132][ T30] audit: type=1326 audit(1746241805.516:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.871207][ T30] audit: type=1326 audit(1746241805.526:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.893634][ T30] audit: type=1326 audit(1746241805.526:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.919791][ T30] audit: type=1326 audit(1746241805.526:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.943722][ T30] audit: type=1326 audit(1746241805.526:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.966524][ T30] audit: type=1326 audit(1746241805.546:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1602.990110][ T30] audit: type=1326 audit(1746241805.556:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19689 comm="syz.9.3788" exe="/root/syz-executor" sig=0 arch=40000003 syscall=46 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 1603.705446][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 1605.090291][T19715] syz.8.3798: attempt to access beyond end of device [ 1605.090291][T19715] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1608.315965][T19743] loop5: detected capacity change from 0 to 512 [ 1608.829195][T19745] syz.8.3812: attempt to access beyond end of device [ 1608.829195][T19745] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1612.268394][ T5798] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1612.284128][ T5798] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1612.293574][ T5798] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1612.322321][ T5798] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1612.343007][ T5798] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1614.142753][T19767] chnl_net:caif_netlink_parms(): no params data found [ 1614.426292][T10675] Bluetooth: hci5: command tx timeout [ 1614.833120][T19783] syz.5.3826: attempt to access beyond end of device [ 1614.833120][T19783] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1616.505914][T10675] Bluetooth: hci5: command tx timeout [ 1616.878629][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1616.878710][ T30] audit: type=1326 audit(1746241819.776:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1616.909883][ T30] audit: type=1326 audit(1746241819.776:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1616.933117][ T30] audit: type=1326 audit(1746241819.786:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1616.963034][ T30] audit: type=1326 audit(1746241819.786:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1616.992263][ T30] audit: type=1326 audit(1746241819.826:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1617.123899][T19793] loop5: detected capacity change from 0 to 1024 [ 1617.205372][T19793] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1617.294355][T19793] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1617.303614][T19793] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 1617.418531][T19793] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1617.525838][T19793] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1617.561238][T19767] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.569226][T19767] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.577231][T19767] bridge_slave_0: entered allmulticast mode [ 1617.586354][T19767] bridge_slave_0: entered promiscuous mode [ 1617.668574][T19793] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.3830: mark_inode_dirty error [ 1617.675348][ T30] audit: type=1326 audit(1746241819.946:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1617.700204][T19793] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3830: Invalid block bitmap block 3 in block_group 0 [ 1617.704795][ T30] audit: type=1326 audit(1746241819.986:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1617.723809][T19767] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.740473][ T30] audit: type=1326 audit(1746241820.026:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1617.745997][T19767] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.775402][ T30] audit: type=1326 audit(1746241820.096:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1617.778734][T19767] bridge_slave_1: entered allmulticast mode [ 1617.803932][ T30] audit: type=1326 audit(1746241820.096:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19792 comm="syz.5.3830" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1617.809886][T19767] bridge_slave_1: entered promiscuous mode [ 1617.856068][T19793] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3830: Invalid block bitmap block 3 in block_group 0 [ 1617.912889][T19793] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3830: Invalid block bitmap block 3 in block_group 0 [ 1617.970412][T19793] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1618.045638][T19793] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.3830: mark_inode_dirty error [ 1618.093781][T19793] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm syz.5.3830: lblock 6 mapped to illegal pblock 1 (length 1) [ 1618.173138][T19793] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.3830: lblock 0 mapped to illegal pblock 48 (length 1) [ 1618.315983][T19793] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3830: Failed to acquire dquot type 0 [ 1618.382376][T19793] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 49: comm syz.5.3830: lblock 1 mapped to illegal pblock 49 (length 1) [ 1618.497461][T19793] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3830: Failed to acquire dquot type 0 [ 1618.579444][T19793] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1618.598284][T10675] Bluetooth: hci5: command tx timeout [ 1618.633861][T19767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1618.666036][T19793] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #15: comm syz.5.3830: mark_inode_dirty error [ 1618.775738][T19793] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 1618.788829][T19793] EXT4-fs (loop5): 1 orphan inode deleted [ 1618.798569][T19793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1618.927976][T19767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1619.532481][T18410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1620.162100][T19767] team0: Port device team_slave_0 added [ 1620.328733][T19767] team0: Port device team_slave_1 added [ 1620.459120][T19802] loop8: detected capacity change from 0 to 256 [ 1620.658758][T19767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1620.666734][T10675] Bluetooth: hci5: command tx timeout [ 1620.673696][T19767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.702113][T19767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1620.730660][T19802] exfat: Deprecated parameter 'utf8' [ 1620.737951][T19802] exfat: Deprecated parameter 'utf8' [ 1620.803167][T19767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1620.810678][T19767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1620.838827][T19767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.909344][T19802] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 1621.524714][T19767] hsr_slave_0: entered promiscuous mode [ 1621.534299][T19767] hsr_slave_1: entered promiscuous mode [ 1621.542580][T19767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1621.552276][T19767] Cannot create hsr debugfs directory [ 1622.706158][T19814] syz.5.3837: attempt to access beyond end of device [ 1622.706158][T19814] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1623.886705][ T5798] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1623.923726][ T5798] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1623.948135][ T5798] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1623.965382][ T5798] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1624.009092][ T5798] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1624.782396][T19831] blktrace: Concurrent blktraces are not allowed on sg0 [ 1624.931443][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1624.931525][ T30] audit: type=1326 audit(1746241827.826:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1624.963005][ T30] audit: type=1326 audit(1746241827.856:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1624.987791][ T30] audit: type=1326 audit(1746241827.856:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1625.010467][ T30] audit: type=1326 audit(1746241827.876:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1625.709110][T19831] loop5: detected capacity change from 0 to 1024 [ 1625.827448][T19831] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1626.146875][T19831] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1626.157491][T19831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c854e01c, mo2=0100] [ 1626.238877][T19831] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1626.271513][ T5798] Bluetooth: hci6: command tx timeout [ 1626.436999][T19831] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1626.452368][T19767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1626.556146][T19831] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.3841: mark_inode_dirty error [ 1626.685969][ T30] audit: type=1326 audit(1746241828.586:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1626.686186][T19831] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3841: Invalid block bitmap block 3 in block_group 0 [ 1626.708937][ T30] audit: type=1326 audit(1746241828.616:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1626.709207][ T30] audit: type=1326 audit(1746241828.616:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1626.709459][ T30] audit: type=1326 audit(1746241828.636:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1626.709722][ T30] audit: type=1326 audit(1746241828.636:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1626.709976][ T30] audit: type=1326 audit(1746241828.636:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19829 comm="syz.5.3841" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70ae539 code=0x7ffc0000 [ 1626.717742][T19767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1626.968760][T19831] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3841: Invalid block bitmap block 3 in block_group 0 [ 1627.207554][T19831] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3841: Invalid block bitmap block 3 in block_group 0 [ 1627.261028][T19831] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1627.376073][T19831] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #3: comm syz.5.3841: mark_inode_dirty error [ 1627.438287][T19767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1627.496063][T19831] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 1: comm syz.5.3841: lblock 6 mapped to illegal pblock 1 (length 1) [ 1627.586730][T19831] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 48: comm syz.5.3841: lblock 0 mapped to illegal pblock 48 (length 1) [ 1627.680693][T19767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1627.776967][T19831] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3841: Failed to acquire dquot type 0 [ 1627.886753][T19831] EXT4-fs error (device loop5): ext4_map_blocks:675: inode #3: block 49: comm syz.5.3841: lblock 1 mapped to illegal pblock 49 (length 1) [ 1627.978517][T19831] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.3841: Failed to acquire dquot type 0 [ 1628.061869][T19824] chnl_net:caif_netlink_parms(): no params data found [ 1628.265652][T19831] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 1628.358058][ T5798] Bluetooth: hci6: command tx timeout [ 1628.394521][T19831] EXT4-fs error (device loop5): ext4_evict_inode:259: inode #15: comm syz.5.3841: mark_inode_dirty error [ 1628.535043][T19831] EXT4-fs warning (device loop5): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 1628.548201][T19831] EXT4-fs (loop5): 1 orphan inode deleted [ 1628.557613][T19831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1629.363004][T18410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1630.425945][ T5798] Bluetooth: hci6: command tx timeout [ 1630.974354][T19767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.991810][T19824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.000634][T19824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.008519][T19824] bridge_slave_0: entered allmulticast mode [ 1631.018136][T19824] bridge_slave_0: entered promiscuous mode [ 1631.258071][T19824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.265910][T19824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.277053][T19824] bridge_slave_1: entered allmulticast mode [ 1631.286164][T19824] bridge_slave_1: entered promiscuous mode [ 1631.566981][T19870] syz.9.3849: attempt to access beyond end of device [ 1631.566981][T19870] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1632.012134][T19824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.074236][T19767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1632.209519][T19824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1632.268320][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.275890][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.301407][T19873] loop5: detected capacity change from 0 to 16 [ 1632.461002][T19873] erofs (device loop5): mounted with root inode @ nid 36. [ 1632.516412][ T5798] Bluetooth: hci6: command tx timeout [ 1632.644089][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.651784][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.756653][ T5798] erofs (device loop5): failed to decompress -26 in[46, 0] out[9000] [ 1632.819886][T19824] team0: Port device team_slave_0 added [ 1632.857401][T19824] team0: Port device team_slave_1 added [ 1632.946530][T19875] erofs (device loop5): failed to decompress -26 in[46, 4050] out[8192] [ 1632.957477][T19875] erofs (device loop5): read error -117 @ 0 of nid 89 [ 1632.993206][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1632.993296][ T30] audit: type=1800 audit(1746241835.866:2592): pid=19875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3850" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 1633.395847][T19824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1633.403124][T19824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.429291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.438617][T19824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1633.780584][T19824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1633.788913][T19824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1633.815524][T19824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1634.801816][T19824] hsr_slave_0: entered promiscuous mode [ 1634.811096][T19824] hsr_slave_1: entered promiscuous mode [ 1634.819662][T19824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1634.827705][T19824] Cannot create hsr debugfs directory [ 1635.117502][ T5798] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 1635.441920][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.817575][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.038514][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.540095][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.712096][T19767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1637.245777][ T12] bridge_slave_1: left allmulticast mode [ 1637.251626][ T12] bridge_slave_1: left promiscuous mode [ 1637.258938][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.426909][ T12] bridge_slave_0: left allmulticast mode [ 1637.433054][ T12] bridge_slave_0: left promiscuous mode [ 1637.439539][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.506515][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1638.129787][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1638.195880][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1638.284912][ T12] bond0 (unregistering): Released all slaves [ 1639.004863][T19767] veth0_vlan: entered promiscuous mode [ 1639.147821][ T5798] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1639.156691][ T5798] Bluetooth: hci0: Injecting HCI hardware error event [ 1639.168768][ T5798] Bluetooth: hci0: hardware error 0x00 [ 1639.752293][T19767] veth1_vlan: entered promiscuous mode [ 1639.991267][ T12] hsr_slave_0: left promiscuous mode [ 1640.066903][ T12] hsr_slave_1: left promiscuous mode [ 1640.076016][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1640.086357][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1640.210947][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1640.219091][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1640.307572][ T12] veth1_macvtap: left promiscuous mode [ 1640.313384][ T12] veth0_macvtap: left promiscuous mode [ 1640.323239][ T12] veth1_vlan: left promiscuous mode [ 1640.329045][ T12] veth0_vlan: left promiscuous mode [ 1640.573034][T19923] syz.9.3860: attempt to access beyond end of device [ 1640.573034][T19923] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1641.545361][ T5798] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1642.087789][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1642.116803][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1643.997849][T19767] veth0_macvtap: entered promiscuous mode [ 1644.325262][T19767] veth1_macvtap: entered promiscuous mode [ 1644.702322][T19767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.713854][T19767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.724765][T19767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.735817][T19767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.746389][T19767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.757275][T19767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.767577][T19767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1644.778514][T19767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1644.797610][T19767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1644.888750][T19824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1645.027025][T19824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1645.208828][T19767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.220412][T19767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.231144][T19767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.242400][T19767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.253350][T19767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.264979][T19767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.276274][T19767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1645.287314][T19767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1645.306861][T19767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.346875][T19824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1645.466622][T19824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1645.741103][T19767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.751367][T19767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.761474][T19767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.771256][T19767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1646.562970][T19956] loop8: detected capacity change from 0 to 64 [ 1646.731946][T19956] ===================================================== [ 1646.743481][T19956] BUG: KMSAN: uninit-value in hfs_bnode_dump+0x421/0x4c0 [ 1646.752322][T19956] hfs_bnode_dump+0x421/0x4c0 [ 1646.759578][T19956] hfs_brec_remove+0x8d9/0xa60 [ 1646.764698][T19956] hfs_cat_move+0x1068/0x1390 [ 1646.769715][T19956] hfs_rename+0x313/0x550 [ 1646.774237][T19956] vfs_rename+0x1e87/0x2460 [ 1646.779183][T19956] do_renameat2+0x175e/0x1d70 [ 1646.784112][T19956] __ia32_sys_rename+0xd7/0x140 [ 1646.791529][T19956] ia32_sys_call+0x3d36/0x42c0 [ 1646.797574][T19956] __do_fast_syscall_32+0xb0/0x110 [ 1646.803051][T19956] do_fast_syscall_32+0x38/0x80 [ 1646.808731][T19956] do_SYSENTER_32+0x1f/0x30 [ 1646.813472][T19956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1646.822374][T19956] [ 1646.824828][T19956] Local variable data.i created at: [ 1646.830325][T19956] hfs_bnode_dump+0x393/0x4c0 [ 1646.835493][T19956] hfs_brec_remove+0x8d9/0xa60 [ 1646.844397][T19956] [ 1646.850431][T19956] CPU: 1 UID: 0 PID: 19956 Comm: syz.8.3869 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1646.863005][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1646.873411][T19956] ===================================================== [ 1646.882781][T19956] Disabling lock debugging due to kernel taint [ 1646.889313][T19956] Kernel panic - not syncing: kmsan.panic set ... [ 1646.895922][T19956] CPU: 1 UID: 0 PID: 19956 Comm: syz.8.3869 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1646.909918][T19956] Tainted: [B]=BAD_PAGE [ 1646.914223][T19956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1646.924485][T19956] Call Trace: [ 1646.927927][T19956] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1646.931001][T19956] __dump_stack+0x26/0x30 [ 1646.935588][T19956] dump_stack_lvl+0x53/0x270 [ 1646.940426][T19956] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1646.946512][T19956] dump_stack+0x1e/0x25 [ 1646.950892][T19956] panic+0x4bd/0xd50 [ 1646.955052][T19956] kmsan_report+0x29d/0x2a0 [ 1646.959788][T19956] ? filter_irq_stacks+0x49/0x190 [ 1646.965093][T19956] ? kmsan_get_metadata+0x105/0x1b0 [ 1646.970527][T19956] ? __msan_warning+0x96/0x120 [ 1646.975482][T19956] ? hfs_bnode_dump+0x421/0x4c0 [ 1646.980549][T19956] ? hfs_brec_remove+0x8d9/0xa60 [ 1646.985707][T19956] ? hfs_cat_move+0x1068/0x1390 [ 1646.990725][T19956] ? hfs_rename+0x313/0x550 [ 1646.995397][T19956] ? vfs_rename+0x1e87/0x2460 [ 1647.000275][T19956] ? do_renameat2+0x175e/0x1d70 [ 1647.005323][T19956] ? __ia32_sys_rename+0xd7/0x140 [ 1647.010551][T19956] ? ia32_sys_call+0x3d36/0x42c0 [ 1647.015663][T19956] ? __do_fast_syscall_32+0xb0/0x110 [ 1647.021174][T19956] ? do_fast_syscall_32+0x38/0x80 [ 1647.026408][T19956] ? do_SYSENTER_32+0x1f/0x30 [ 1647.031297][T19956] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1647.038029][T19956] ? kmsan_get_metadata+0x105/0x1b0 [ 1647.043474][T19956] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1647.049519][T19956] ? hfs_bnode_dump+0x1d1/0x4c0 [ 1647.054598][T19956] ? filter_irq_stacks+0x49/0x190 [ 1647.059830][T19956] ? stack_depot_save_flags+0x35/0x7c0 [ 1647.065627][T19956] ? kmsan_get_metadata+0x105/0x1b0 [ 1647.071073][T19956] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1647.077650][T19956] __msan_warning+0x96/0x120 [ 1647.082446][T19956] hfs_bnode_dump+0x421/0x4c0 [ 1647.087376][T19956] hfs_brec_remove+0x8d9/0xa60 [ 1647.092405][T19956] hfs_cat_move+0x1068/0x1390 [ 1647.097275][T19956] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1647.103361][T19956] hfs_rename+0x313/0x550 [ 1647.107876][T19956] ? __pfx_hfs_rename+0x10/0x10 [ 1647.112901][T19956] ? __pfx_hfs_rename+0x10/0x10 [ 1647.117936][T19956] vfs_rename+0x1e87/0x2460 [ 1647.122704][T19956] do_renameat2+0x175e/0x1d70 [ 1647.127641][T19956] __ia32_sys_rename+0xd7/0x140 [ 1647.132700][T19956] ia32_sys_call+0x3d36/0x42c0 [ 1647.137658][T19956] __do_fast_syscall_32+0xb0/0x110 [ 1647.143015][T19956] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1647.149022][T19956] do_fast_syscall_32+0x38/0x80 [ 1647.154104][T19956] do_SYSENTER_32+0x1f/0x30 [ 1647.158829][T19956] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1647.165395][T19956] RIP: 0023:0xf710e539 [ 1647.169634][T19956] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1647.189455][T19956] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000026 [ 1647.198113][T19956] RAX: ffffffffffffffda RBX: 00000000800003c0 RCX: 0000000080000780 [ 1647.206268][T19956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1647.214402][T19956] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1647.222524][T19956] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1647.230672][T19956] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1647.238821][T19956] [ 1647.242311][T19956] Kernel Offset: disabled [ 1647.246725][T19956] Rebooting in 86400 seconds..